A forgotten login can outlive the device behind it. After a lost phone, a resold laptop, a hotel computer or suspicious account activity, major services usually let you inspect active sessions and end them remotely. The warning is simple: signing out will not stop an intruder who already knows the password.
- Remote sign-out exists: Google, Apple, Meta, WhatsApp, Netflix and Amazon expose some control, but not the same level of detail.
- Visibility varies: Some show dates, locations and device types; Amazon relies on a password reset.
- Order matters: Change the password first, then close unknown sessions, then review two-factor authentication.
Google and Apple: start with the accounts that unlock everything else
Google places device management under Security and sign-in. In the Your devices panel, choose Manage all devices to see hardware with an open session or recent activity. Select the device and choose Sign out. Google may list several sessions for the same machine, such as one per browser, incognito window or authorized app, and recommends closing all if ownership is unclear. The timestamp reflects the last server contact, which background sync can push later than actual use.
Apple puts the list behind your name in Settings on iPhone or iPad; each device offers Remove from Account. On a Mac, start in System Settings from the Apple menu. From Windows or Android, use account.apple.com and open Devices. Apple cautions that a device still signed in may reappear when it next connects to the internet. For a missing device, Find My is the correct tool for Lost Mode or remote erasure.
WhatsApp and Meta: linked devices need a closer look
WhatsApp allows up to four linked devices—a computer, browser, tablet or second phone—alongside the primary handset. Review them in Linked devices on that handset, tap an unknown entry and choose Log out. The service disconnects linked devices after 30 days of inactivity and also signs them out if the primary phone goes unused for more than 14 days. A useful precaution on a shared computer is to uncheck Keep me signed in before scanning the QR code, so the session ends when the tab closes. WhatsApp also states that it cannot reveal who accessed an account, when, or from where.
Meta is gradually moving users to Meta accounts, so controls may sit in Accounts Center or Meta account settings. The path is Password and security, then Where you’re logged in, then the relevant account. Entries show date, time, location and device type. Use Select devices to log out for one session, or Select all to end every session at once.
Netflix and Amazon: two different approaches
Netflix keeps this simple. Under Manage access and devices, it shows recently active hardware, the profile used and the date of the last playback. Use the arrow beside a device to sign it out, or choose Sign out of all devices at the bottom. A device can take up to 48 hours to appear; hardware inactive for more than 90 days is not displayed.
Amazon takes a different route. Its Spanish-language help for signing out of a lost device recommends changing the password, which ends sessions in its apps and websites on every device except Kindle; Kindle has a separate loss or theft procedure. From another device, Amazon also advises updating the password, email address, mobile number and two-step verification number. The page reviewed is for Amazon.com, and Amazon.es may use different labels.
Why signing out is only the first step
Signing out is not enough if account takeover is suspected. It ejects the intruder from that device, but a known password can restore access in a minute. Google directs users to its account-protection steps when a device is unrecognized; Amazon turns a password change into the logout mechanism itself.
The sensible sequence is to change the password from a trusted device, close unrecognized sessions, then enable or review two-factor authentication. If the password was reused elsewhere, the problem is larger than one forgotten session, and a breach check is warranted.
Comparing the six systems reveals uneven protection. Google and Meta show dates and places; Netflix adds profile data; WhatsApp admits it cannot identify who entered; Amazon offers no session list on the reviewed page, only a password change that clears everything. There is no universal logout-everywhere gesture.
That makes session review a habit rather than an emergency measure. A few minutes every few months on the accounts that guard the rest—Google or Apple, plus email—cuts off most forgotten access. Over time, passkeys offer a cleaner path: they bind sign-in to devices and cannot leak like a typed password.