Is Someone Else Using Your Account? How to Check Google and Microsoft Security

It is a scary thought: someone might be reading your emails or looking at your photos right now without you knowing.

Hackers don’t always lock you out of your account immediately. Sometimes, they prefer to stay logged in silently. They might watch your activity for weeks to steal personal information or reset passwords for other accounts.

Fortunately, both Google and Microsoft have built-in tools that act like a security camera for your account.

In this guide, we will show you how to check these activity logs for Gmail and Outlook. You will learn how to spot a stranger and exactly how to kick them out.

How to Check Your Google Account (Gmail, Drive, Photos)

Google has a very clear dashboard that shows you exactly which devices are connected to your account. Here is how to find it.

Go to the Security Dashboard

First, go to Google.com or open your Gmail. Click your profile picture in the top right corner and select the button that says “Manage your Google Account.”

On the left-hand menu (or the top menu on mobile), click on “Security.”

Check “Your Devices”

Scroll down until you find the section called “Your devices” and click on “Manage all devices.”

This list shows every phone, laptop, and tablet that currently has access to your data. Look closely at the details.

• Check the device type: Do you see an iPhone listed when you only use a Samsung?
• Check the location: Is there a login from a city or country you have never visited?

The “Sign out” Button

If you see a device you do not recognise, or even an old phone you sold years ago, you should remove it.

Simply click on the suspicious device and select “Sign out.” This instantly kicks that device off your account. They will lose access to your emails, photos, and drive files immediately.

How to Check Your Microsoft Account (Outlook, OneDrive)

If you use Outlook, Hotmail, or have a Microsoft 365 subscription, you need to check your Microsoft security dashboard.

Access Your Recent Activity

Go to account.microsoft.com/security and sign in. Click on the button that says “View my sign-in activity.”

You might need to verify your identity with a code sent to your phone or email to access this page.

Understanding the Log

This list can look scary. You will likely see a long list of attempts from countries like China, Russia, or Brazil.

Do not panic.

Microsoft logs every attempt to access your account, including the ones that failed. Bots constantly try to guess passwords for millions of accounts.

• Ignore: Entries that say “Unsuccessful sync,” “Incorrect password,” or “Automatic Sync.” These are just failed attempts by bots. They did not get in.
• Look for: Entries that say “Successful sign-in.” If you see a successful login from a location you don’t know, or at a time when you were asleep, that is a red flag.

Check Your Recovery Methods

While you are in the security dashboard, look for “Advanced security options.”

Check the “Ways to prove who you are” section. Ensure that the phone numbers and email addresses listed there belong to you. Sometimes, a hacker will add their own email address so they can get back into your account even if you change your password. If you see a stranger’s details, remove them immediately.

Red Flags: When to Be Worried

How do you know if an entry in your log is actually dangerous? Here are three clear signs that a stranger has accessed your account.

• Strange Locations: You live here in Adelaide. If you see a successful login from Russia, Brazil, or even Sydney when you haven’t travelled there, that is a confirmed breach.
• Wrong Times: Look at the timestamp. If your account was accessed at 3:00 AM while you were fast asleep, it wasn’t you.
• Unknown Browsers or Devices: You know what you use. If you always use Google Chrome on a PC, but the log shows a login from “Firefox on a Mac” or an iPhone you don’t own, that is a major red flag.

What to Do If You Find a Suspicious Login

If you see a login from Russia, or a device you don’t own, you need to act immediately. Don’t just close the window. Follow these four steps in order.

1. Force a Sign-Out

First, kick them off.

• Google: Use the “Sign out” button on the specific device we mentioned earlier.
• Microsoft: In the “Advanced security options,” look for “Sign me out.” This forces every device logged into your account to sign out (though it can take up to 24 hours for Microsoft accounts, so changing the password immediately is also key).

2. Scan for Viruses

Do not change your password yet. If a virus or “keylogger” on your computer stole your password, it will simply steal the new one the moment you type it.
Run a full scan with your antivirus software to make sure your computer is clean.

3. Change Your Password

Once you know your computer is clean and the intruder has been signed out, change your password. Make it strong and unique. Do not use a password you have used on other sites.

4. Set Up a Passkey

This is your best defence against future attacks. While passwords can be stolen, passkeys cannot. They replace your password entirely, using your phone or computer to log you in securely.

Even if a hacker has your old password, they cannot get back in without your physical device. We highly recommend setting up passkeys for your Microsoft and Google accounts to lock them out for good.

Your Final Safety Check

Checking these activity logs once a month is a smart habit. It acts like a regular health check for your digital life. It only takes two minutes, but it gives you total peace of mind knowing that you are the only person looking at your emails and files.

However, if you did find a suspicious login and you are worried your computer is compromised, or if you have been locked out of your account entirely, we can help.

Computer Expert Adelaide specialises in account recovery and security cleanup. We can remove hidden malware, secure your accounts, and help you get back in control. Give us a call today.