Forgotten Devices Are Still Logged Into Your Accounts — Here's How to Kick Them Out
Think about every phone you've owned in the last five years. Every tablet, laptop, or old work computer. Where are those devices now? Sold? Handed down to a relative? Sitting in a junk drawer?
Here's the uncomfortable truth: most of those devices are probably still signed into your accounts. Email, social media, banking apps, cloud storage — all of it. When you stopped using a device, your accounts didn't automatically close the door behind you. They just left it open.
This is one of those security issues that feels abstract until it isn't. An old phone that got resold without a proper factory reset. A laptop that got stolen. A tablet a family member is still using but shouldn't be. Any of these scenarios can mean someone else has passive access to your digital life.
The fix isn't complicated. It just requires knowing where to look.
Why This Actually Matters
Before getting into the how-to, here's why this is worth your time:
- A device logged into your email can receive password reset links — which effectively means it can access anything tied to that email address
- Old devices logged into financial apps or banking portals represent real exposure if those devices are lost, stolen, or in someone else's hands
- Cloud storage access means someone could potentially view, download, or delete your files
- Social media logins allow posting, messaging, and viewing private content
The good news is that every major platform lets you view and revoke access for individual devices. You just have to actually do it.
Google / Gmail / Android: Checking Your Connected Devices
Google is the most comprehensive about showing you what's connected.
- Go to myaccount.google.com
- Click Security in the left sidebar
- Scroll down to Your devices
- Click Manage all devices
You'll see a full list of every device that's signed into your Google account, along with the last time it was active and its approximate location. Any device showing as "Signed out" is inactive but still listed — you can remove it from the list. Any device that's still "Signed in" that you don't recognize or no longer own: click it and select Sign out.
While you're here, also check Recent security activity on that same Security page to see if there have been any logins from unexpected locations.
Apple ID / iCloud: Removing Old iPhones, iPads, and Macs
Apple makes this pretty accessible.
On iPhone or iPad:
- Go to Settings and tap your name at the top
- Scroll down past iCloud and App Store options — you'll see a list of all devices signed into your Apple ID
- Tap any device you don't recognize or no longer use
- Tap Remove from Account
On Mac:
- Go to System Settings > [Your Name]
- Same thing — scroll down to see all signed-in devices
- Click any device and choose Remove from Account
On the web:
- Go to appleid.apple.com
- Sign in and scroll to the Devices section
- Click any device to see details and remove it
Removing a device from your Apple ID signs it out of iCloud, iMessage, FaceTime, and the App Store. If you sold a device without wiping it first, this is especially important to do.
Microsoft Account: Windows PCs and Xbox Consoles
Microsoft's account management page covers Windows computers, Xbox consoles, and any other device you've signed into with your Microsoft account.
- Go to account.microsoft.com
- Click Devices in the top navigation
- You'll see every device linked to your account
- For devices you no longer own or use, click Remove device
For active sessions specifically (not just registered devices), go to account.microsoft.com/security and look for Sign-in activity to see recent logins and locations.
Facebook and Instagram: Logging Out Remotely
Facebook keeps a detailed record of every device and browser session connected to your account.
On Facebook:
- Go to Settings & Privacy > Settings
- Click Security and Login
- Look for Where You're Logged In — this lists every active session with device type and approximate location
- Click the three dots next to any session and choose Log Out — or hit Log Out of All Sessions at the bottom to do it all at once
On Instagram:
- Go to Settings > Security > Login Activity
- Same idea — you'll see a list of active sessions
- Tap the three dots next to any you want to remove and select Log Out
Amazon: Deregistering Old Devices and Ending Sessions
Amazon is worth checking because it covers not just the shopping app but also Kindle devices, Fire tablets, Echo speakers, and Fire TV sticks.
- Go to amazon.com and head to Account & Lists > Your Account
- Click Content & Devices
- Click the Devices tab
- Find any device you no longer own and click the three dots, then Deregister
For browser sessions and the Amazon app specifically, check Login & Security under your account settings.
A Few Other Places to Check
- Twitter/X: Settings > Security and account access > Apps and sessions > Sessions
- Spotify: Account overview at spotify.com > Security > Sign out everywhere
- Dropbox: dropbox.com/account/security — look for Devices and remove anything unfamiliar
- PayPal: Settings > Security > Manage your devices
Make It a Habit
Doing this audit once is good. Doing it twice a year is better. A lot of people only think about this stuff after something goes wrong — an account gets compromised, a device goes missing, or they realize their old phone is still syncing photos somewhere.
Set a recurring reminder every six months to run through the major platforms: Google, Apple, Microsoft, and Facebook at minimum. It takes maybe 15 minutes total and the peace of mind is genuinely worth it.
The devices you've moved on from shouldn't still have a front-row seat to your digital life. Time to show them the door.