Every time you log in from a computer or phone, a “session” is created. You can see them all and close the ones you don't recognize — just like checking who has the keys to your house.
Where to look
1. Go to Profile → Sessions.
2. You'll find the list of connected devices, along with the date and time of the last access.
3. Don't recognize an entry? Press “Revoke”: that device is disconnected instantly, and to get back in, it would need password + code again.
Good habits
Check your sessions every now and then, especially if you use shared computers.
There's a maximum number of simultaneous sessions: if you reach it, close the oldest one.
After logging in from a new device, for sensitive operations we might ask you for an extra confirmation: it's a protection, not an error.
If you suspect someone got in
Do these three things, in order: 1) change your password immediately, 2) revoke all sessions, 3) write to us via Messenger. We'll block and check everything together with you.