How to sign out of all devices after a security scare
2 min read · Updated October 15, 2026
In your account’s security settings, look for a list of signed-in devices or sessions and choose the option to sign out everywhere. Then change your password, revoke connected apps and enable two-factor authentication so any leftover access stops working.
Why signing out matters
Sessions can survive a password change. If an attacker is already signed in, they may stay signed in until the session expires or is revoked. Signing out of all devices forces everyone, including you, to authenticate again.
Where to find it
Look in the Security or Account section of your provider’s settings for headings such as Devices, Sessions, Recent activity or Where you’re signed in. Most major services offer a ‘sign out of all devices’ or ‘sign out everywhere’ action.
First, see what was actually exposed
Before you change anything, find out whether your address shows up in known breach records. The free check takes seconds.
Do not forget connected access
- ✓Third-party apps with permission to your account.
- ✓App passwords created for older mail programs.
- ✓Browser extensions that can read your mail.
- ✓Phones and tablets that sync your mailbox.
Apply it to more than email
Repeat the process for banking, social media and cloud storage after a password leak. Prioritise accounts that hold money or identity details.
Frequently asked questions
Will I be logged out of my own devices?+
Yes. You will sign in again with your new password and second factor.
Does signing out remove malware?+
No. If you suspect malware, scan or reset the device as well, since it could capture your new password.
How often should I review sessions?+
Every few months, and after any security incident.
Stop guessing. Check your email in seconds.
The free Leakill check looks for your email address in known breach records and tells you whether it was exposed. If it was, an optional detailed report lists the incidents, dates, sources, the kinds of data involved and practical next steps. It is a one-off report, not a subscription.
A breach match is a warning signal, not proof that someone has access to your account today. No public database covers every breach, so a clean result lowers risk without guaranteeing safety.