An unfamiliar device entry needs checking, not panic. It can be a real sign-in from a new browser or a stale-looking record. It can also be a live route into your account. The job is to tell those cases apart before the entry becomes background noise.
Read the entry before removing it
Start with the details the account page actually provides: device name, browser or app, approximate location, and time. Do not treat the device label as a serial number. Google says its list can show devices that are currently signed in or were signed in in the last few weeks. It can also show several sessions for one device, because a new browser, app, private window, password check, or app authorization can create another session. Background syncing can make the listed time later than the last time you touched the device. Google’s device guide explains those limits.
That does not make an unknown entry harmless. It means the useful question is narrower: can the details describe one of your devices, browsers, or recent sign-ins?
Decision tree: remove it, or treat it as a compromise
- You can account for it. Open the entry and compare its details with a phone, computer, browser, or app you used. If the timing and service fit, leave it alone or sign out of an old session you no longer need.
- You cannot account for it, but there are no other warning signs. Sign out of that session or remove that device, then check the list again. Google specifically advises signing out of every session with the same device name when you are unsure whether they all belong to you.
- You cannot account for it and there are warning signs. Unfamiliar password or recovery-setting changes, messages you did not send, purchases, or sign-in alerts move this beyond list cleanup. Change the account password immediately, then remove unfamiliar access and follow the provider’s account-security process. Google’s compromised-account guidance also calls out passwords reused on other sites.
A hypothetical example: an entry says “Chrome on Mac,” but you only own one Mac. That alone proves very little, since a second Chrome profile, a private window, or a site authorization can create another Google session. If its time matches your own use, it is likely explainable. If it appears while you were asleep and account recovery details also changed, do not spend the afternoon decoding the label. Change the password first.
The list is not the same on every account
Google’s page is largely a session review. Apple’s device list is more like a list of devices signed in to an Apple Account. Apple says it can include Android phones, Windows PCs, and streaming devices used for Apple Music or Apple TV, not just Apple hardware. Removing a device remotely signs it out and stops its access to services such as iCloud and Find My, and it will not reappear unless that device signs in again. Apple documents the removal steps and effects.
So use the buttons your provider offers, but do not assume they all mean exactly the same thing. Removing an entry does not explain how it appeared, undo a change already made, or replace the lost-device process for a missing phone.
The finish line is simple: after you sign out or remove an entry, refresh the account’s device or session page, confirm that the unfamiliar access is gone or marked signed out, and confirm that your password and recovery details are still yours. If the entry returns, or account activity remains unexplained, use the provider’s recovery or security process rather than repeatedly removing the same label.