How to see who is logged into my email: Gmail, Outlook and Yahoo

To see who is logged into your email, open your provider's device or activity page. In Gmail, that's Manage all devices under "Your devices" in your Google Account, plus the Details link at the bottom of your inbox. In Outlook.com and Hotmail, it's the Microsoft account Recent activity page. In Yahoo, it's Current sign-ins on the Yahoo Account security page. Anything you don't recognize, sign out, then change your password.

The list takes two minutes to read. Reading it correctly takes a little more, because each provider shows sessions, background syncing and approximate locations that can look alarming when they're actually you. Below are the exact steps for each provider, how to tell a real intruder from a false alarm, and what to check that the device list doesn't show.

How to see who is logged into your Gmail

Google gives you two views. Use both.

The "Your devices" list

Go to your Google Account (myaccount.google.com) and open Security & sign-in.
On the Your devices panel, select Manage all devices.
Select any device or session for more detail.

Google says this page shows "devices where you're currently signed in to your Google Account or have been in the last few weeks," and that devices or sessions you've already left are marked "Signed out" (Google Account Help). You can also go straight to google.com/devices.

Gmail's "Last account activity"

Open Gmail on a computer.
At the bottom right of your inbox, click Details.

This opens "Activity on this account." Google says it shows "the dates and times that your Gmail account was used" and "the IP addresses which were used to access your account" (Gmail Help). Three parts matter:

Concurrent session information tells you if you're signed in to Gmail "on another device, browser, or location."
Access type shows the browser, device or mail server (such as POP or IMAP) used to read your mail. If you've authorized an app, you'll see its IP address too.
Location (IP address) lists the last 10 IP addresses and approximate locations. After a suspicious-activity warning, Google may show up to 3 more addresses labeled as suspicious.

The same help page points to the Recent security events page to see "security updates for your entire Google Account."

How to see who is logged into Outlook.com or Hotmail

Microsoft keeps this on your Microsoft account, not inside Outlook itself.

Go to account.live.com/activity and sign in with your Outlook.com or Hotmail address.
Review the Recent activity list for anything you don't recognize.
If something isn't you, sign out everywhere and change your password.

Microsoft lists "Recent activity page," "Unusual sign-in activity" and "Sign out everywhere" among its own account security tools (Microsoft Support). The same Microsoft article says that if you no longer have access to a device where you were signed in, you should use sign out everywhere. To sign out in a single browser, select your profile picture in the top right corner of the page and select Sign out.

How to see who is logged into Yahoo Mail

Sign in to the Yahoo Account security page in a desktop or mobile browser.
Scroll to the activity you want to review.

Yahoo splits it into three lists (Yahoo Help):

Current sign-ins: "a list of current devices signed in to your account."
External connections: "which third-party apps are signed in to your account."
Recent account activity: recent changes, "such as adding a phone number or removing an email address."

In most Yahoo mobile apps, tap the Profile icon, then Settings, Manage account privacy, Your privacy controls and Security.

How to tell an intruder from a false alarm

Most scares on these pages turn out to be you. Before you panic, rule out the usual causes. Each one comes from the provider's own help page.

Several sessions for one device. Google says it's "normal to have multiple sessions on the same device." A new session starts when you sign in on a new browser or app, re-enter your password, grant an app access, or open a private or incognito window (Google Account Help).

A time more recent than you remember. Google's times show the last communication between the device and Google, and that includes "automatic syncing that happens in the background." A phone sitting in your pocket can show activity from a minute ago.

A city you weren't in. Google says you may "see a nearby place instead of an exact location." On a phone or tablet, Gmail may show your mobile carrier's location, which "may be a location far from where you are. As long as the name of the carrier matches yours, this isn't unusual" (Gmail Help). Yahoo adds that unfamiliar locations can appear "if your device detects the wrong location or your internet provider uses a proxy server." A VPN also puts your sign-ins in the VPN server's city.

Other mail apps. If you read Gmail in Apple Mail, Outlook or another client over POP or IMAP, those locations show up too. If you use Gmail's Mail Fetcher, you'll see a Google IP address.

Old or reset devices. A phone you factory reset or a library computer you used once can still be listed.

What should worry you: a device type you've never owned, a browser you never use, a location with no VPN or carrier explanation, or activity at a time when you know you weren't online. Google lists exactly these as "signs that someone else is using your account."

How to sign out devices you don't recognize

Gmail. In Google Account, go to Security & sign-in, then Manage all devices. Tap the device and tap Sign out. Google warns that sessions with the same device name "could come from the same device or multiple devices," so to be sure, sign out of all the sessions with that name.

Outlook.com. Use sign out everywhere in your Microsoft account security settings, as Microsoft's own security article recommends for any device you can no longer reach. You may need to sign back in on your own devices afterward.

Yahoo. In Current sign-ins, click the device and click Sign out. To cut off an app under External connections, click App passwords, pick the app and select Delete app password.

Then change your password from a device you trust. Signing someone out without changing the password just lets them sign back in. Google's Gmail page says that if you don't recognize the activity, "someone might have access to your account because of phishing or malware. Immediately change your password." If you think they've been in for a while, follow our full steps for a hacked email account.

What the device list doesn't show

A clean device list is good news, but it isn't the whole picture. An intruder who was in once can leave settings behind that keep sending them your mail with no session at all. Yahoo's own checklist for a hacked account includes new filters, a changed reply-to address, a new send-only address, an unfamiliar auto-forwarding address and app passwords you don't recognize (Yahoo Help).

Check these in any provider:

Forwarding. Is your mail being sent on to an address you don't know?
Filters and rules. Is anything set to forward, delete or archive certain messages, such as ones from your bank?
Reply-to and send-as addresses. Are replies going to your inbox, or somewhere else?
App passwords and connected apps. Remove anything you didn't set up. In Gmail, an authorized app also shows up under "Access type."
Recovery phone and email. Make sure they're still yours. An attacker who changes them can take the account back after you lock them out.

How to stop it happening again

Use a unique password for your email, stored in a password manager. A password reused from a site that leaked is one of the easiest ways in.
Turn on two-step verification. Yahoo's hacked-account steps include it, and Microsoft's security article suggests its Authenticator app or going passwordless. Our guide to two-factor methods compares the options.
Sign out on shared computers. Microsoft recommends a private browsing window on any computer that isn't yours, and signing out when you're done.
Check the list once a month. It takes two minutes and you'll learn what normal looks like for your account, which makes the odd entry easy to spot.

If you want the background on how accounts actually get taken over, read can someone hack my email?

Frequently asked questions

Can I see exactly who is logged into my email?

You can see devices, browsers, approximate locations and IP addresses, but not a name. Providers show where a sign-in came from, not who was holding the device. If you don't recognize it, treat it as someone else, sign it out and change your password.

Will the other person know I signed them out?

They'll find themselves signed out the next time their device tries to reach the account, and they'll be asked to sign in again. If you've also changed the password, they won't be able to.

Does changing my password sign out other devices?

Don't count on it. Sign out the devices you don't recognize yourself, as described above, and then change the password. Doing both closes the open session and the way back in.

Why does my Gmail show a location I've never been to?

Usually it's your mobile carrier, a VPN, or Google's approximate location placing you in a nearby city. Google says a carrier location far from you isn't unusual as long as the carrier name matches yours. If the carrier or device isn't yours, sign it out.

How do I see who is logged into my Gmail on my phone?

Open the Google app or go to myaccount.google.com in your phone's browser, tap Security & sign-in, then Manage all devices under "Your devices." Google's steps for the Gmail "Details" link for last account activity start on a computer.

Where Secria fits

If you're checking your sign-ins because you no longer trust the account, it may be time for a cleaner start. Secria Mail is free, and you sign up without a phone number or a card. Every plan, the free one included, uses hybrid post-quantum encryption (ML-KEM-1024 with X25519) and zero-access storage, and there are no ads. Aliases (2 on free, 15 on Mail Plus, unlimited on Pro) let you give each site its own address, so a leak at one site doesn't hand out your main inbox.

Checking who is logged into your email is a two-minute habit: open the device list, rule out your own phone and VPN, sign out anything left over, then change the password and look at forwarding and filters. Do it today, and again next month.