Alerts & intrusion signals

Detect Unauthorized Access to Your Facebook Account

A detection-first framework for your OWN account: spot the concrete signs of unauthorized access, triage how urgent they are, and secure everything through official Facebook tools — no passwords ever handled by us.

I see a session or device I don't recognizePosts, messages, or a friend request went out that wasn't meMy recovery email or phone number changed on its ownI got a login alert I didn't trigger
Start recovery

Owner-only. We guide you through Facebook's own screens and never ask for your password.

No password, ever
Every fix happens in Facebook — we never see or ask for your credentials.
Official channels only
We direct you to Facebook's own Password and security screens, not a copy.
Owner and consent only
For your account, your minor child, or a consenting adult — nothing covert.

If a message tells you your account is hacked and links you to "secure it," don't click — open Facebook yourself and check.

Unknown active session
A device, browser, or city in your logged-in list that you don't recognize — especially one marked "Active now".
Actions you never took
Posts, comments, messages, friend requests, or Marketplace listings that appeared without you doing them.
Changed recovery contact
An added or edited email address or phone number you didn't set — the top move an intruder makes to keep control.
Alerts you didn't trigger
"New login from…" or "Was this you?" notices at a time or place you weren't active. Confirm inside the app, not via message links.
2FA or password changed unexpectedly
A password-reset email you didn't request, or two-factor suddenly off or pointing at an unknown app or number.

Every signal above is read from YOUR OWN account (or a minor child / consenting adult you're authorized to help). This is not a way to view anyone else's account, and Facebook does not show "who viewed your profile."

How it works

  1. 1
    End the unknown sessions
    Log the intruder out of every device you don't recognize.
    ⏱ 1-2 min · Only your own devices remain under "Where you're logged in".
  2. 2
    Change your password on Facebook
    Set a new, unique password directly in Facebook's Password and security.
    ⏱ 1-2 min · Facebook confirms the change and offers to log out other devices.
  3. 3
    Turn on two-factor authentication
    Add an authenticator app or SMS code so a password alone can't get in.
    ⏱ 3-5 min · 2FA shows as On, tied to your app or number.
  4. 4
    Restore your recovery contacts
    Remove any email or phone you didn't add and re-confirm your real ones.
    ⏱ 2-4 min · Only contacts you control are listed and verified.
  5. 5
    Run Facebook's Security Checkup
    Walk Facebook's guided sweep to catch anything the steps above missed.
    ⏱ 3-5 min · Checkup ends with all items green or resolved.

There's no countdown here — but the sooner you end unknown sessions and change the password, the less an intruder can do.

We do

  • ✓ Show you how to read the detection signals on your own account
  • ✓ Organize the signs by urgency so you know what to fix first
  • ✓ Point you to Facebook's official Security Checkup and login tools
  • ✓ Support owner, minor-child, and consenting-adult monitoring

We never

  • ✗ Ask for, store, or "find" your Facebook password
  • ✗ Access someone else's account or watch a person without consent
  • ✗ Bypass 2FA, security codes, or any Facebook protection
  • ✗ Promise to unmask an intruder or guarantee an outcome

Detection and recovery happen on accounts you own or are authorized to help — always through Facebook's own screens, never around them.

The terms that show up while you triage unauthorized access:

Active session
A device or browser currently signed in to your account; "Active now" means it's live this moment.
Recovery contact
The email or phone Facebook uses to reset access — the first thing an intruder tries to change.
Unrecognized login
A sign-in from a device or place Facebook hasn't seen for you before; it can trigger an alert.
Security Checkup
Facebook's guided tool that reviews logins, alerts, and 2FA in one flow.
Two-factor authentication (2FA)
A second code beyond your password, so a stolen password alone can't sign in.

FAQ

What's the single clearest sign my Facebook was accessed?
An active session you don't recognize under Settings › Password and security › Where you're logged in — especially one marked "Active now." Combine it with actions you never took in your activity log and it's near-certain. End the session and change your password immediately.
Can you tell me who got into my account?
No, and be wary of anyone who promises to. Facebook shows the device type, approximate location, and time of a login, but not a person's real identity. We help you read those signals and secure the account — we can't and won't unmask an intruder.
My recovery email changed by itself — what do I do first?
Treat it as an active takeover. End unknown sessions, change your password in Facebook, then remove the email or phone you didn't add and re-confirm your own. If you're locked out, use Facebook's official account-recovery flow at facebook.com — never a link sent to you.
Is it safe to act on a login alert I received?
A genuine Facebook "New login" or "Was this you?" alert is worth acting on — but confirm it by opening the Facebook app or facebook.com yourself, not by tapping a link in an email or text. Scammers copy these alerts to steal passwords.
Can I use this to check someone else's Facebook?
No. Everything here is for your own account, a minor child you're responsible for, or a consenting adult. There's no legal or supported way to detect access on an account you don't own or aren't authorized to help.