How to Check if Someone Else Is Using Your Facebook Account

Short answer: Facebook shows you every device and location currently logged into your account under Settings, so you can spot a stranger's session, log it out remotely with one tap, change your password, and turn on two-factor authentication to keep them out. Here is exactly where to look and how to lock things down.

Step 1: See where you are logged in

On the app or facebook.com, go to Settings & privacy > Settings > Password and security > Where you're logged in. You will see a list of every active session: device type, approximate location, and last active time. Anything you do not recognise, a strange city, an unknown phone, is a red flag.

Step 2: Log out the intruder remotely

Tap any suspicious session and choose Log out. You can also select Log out of all sessions to boot every device at once, then log back in only on your own. This instantly kicks out anyone else, even if they are active right then.

Step 3: Change your password immediately

If you saw an unknown session, assume your password is compromised. Change it to something strong and unique that you do not use anywhere else. Logging out sessions without changing the password only buys time if they know your login.

Step 4: Turn on two-factor authentication (the real fix)

This is the step that actually keeps intruders out for good. Under Password and security > Two-factor authentication, enable it using an authenticator app (more secure than SMS). After this, even someone with your password cannot log in without your second code.

Step 5: Turn on login alerts

Enable Login alerts so Facebook notifies you whenever your account is accessed from a new device or browser. You will know the moment something is off, instead of discovering it later.

Other signs your account may be compromised

• Posts, messages or friend requests you did not make.
• Your name, birthday or email quietly changed.
• Password-reset emails you did not request.

If you see these, run the steps above and check Settings > Password and security > Recent emails from Facebook to see if the attacker changed anything.

The non-obvious tip: check connected apps too

Someone does not need your password to abuse your account if a shady third-party app has access. Under Settings > Apps and websites, remove anything you do not recognise or no longer use. Old game and quiz app permissions are a common overlooked backdoor.

Frequently asked questions

How do I know if someone else is on my Facebook?

Go to Settings > Password and security > Where you're logged in. It lists every active device and location. Anything you do not recognise is a warning sign.

How do I log someone out of my Facebook remotely?

In Where you're logged in, tap the suspicious session and choose Log out, or use Log out of all sessions to remove every device at once.

How do I stop people from accessing my Facebook?

Change your password, turn on two-factor authentication with an authenticator app, enable login alerts, and remove unknown connected apps.

Does two-factor authentication stop account hacking?

Largely, yes. Even if someone has your password, they cannot log in without your second factor, which blocks the vast majority of account takeovers.