How to Check if Someone Accessed Your Facebook Account
Find active sessions, login history, and document unauthorized access
Facebook accounts are commonly monitored—by suspicious partners, exes, or even hackers. Unlike email, Facebook contains your social connections, private messages, photos, and location history. Someone with access can see who you're talking to, not just what you're saying.
This guide shows you exactly how to find unauthorized access and document it before taking action.
Before You Change Anything: The Evidence Problem
Step 1: Check Active Sessions (Right Now)
This shows every device currently logged into your Facebook:
- Open Facebook → tap Menu (☰) → Settings & Privacy → Settings
- Tap Password and security (under Security)
- Tap Where you're logged in
You'll see a list of active sessions with:
- Device type — iPhone, Android, Windows, Mac, etc.
- Location — City based on IP address
- Last active — When that session was last used
Step 2: Review Login History
Active sessions only show current access. To see historical logins:
- Go to Settings → Password and security
- Scroll to Security checkup
- Look at Recent emails from Facebook — shows security alerts you may have missed
Also check your email for Facebook security alerts like:
- "New login from [Device] in [Location]"
- "Your password was changed"
- "A new device was added to your account"
Step 3: Download Your Facebook Data Export
Facebook's data export contains a complete history of your account activity—far more than what's visible in the app. This is critical for documentation.
- Go to Settings → Your Facebook Information → Download your information
- Select JSON format (machine-readable, easier to analyze)
- Choose All time for date range
- Select at minimum: Security and login information, Your activity across Facebook, Logged information
- Tap Request a download
Facebook will email you when your export is ready (usually within 24 hours). Download it to a device the suspected person can't access.
What Facebook Logs (And What It Doesn't)
| Facebook Logs This | Facebook Does NOT Log |
|---|---|
| Device type for each login | Specific messages read |
| IP address and approximate location | Time spent on specific profiles |
| Timestamps of account activity | Screenshots taken by other users |
| Password changes and security events | Who else they shared your content with |
| Connected apps and sessions | Third-party monitoring apps |
Red Flags in Your Facebook Data
When reviewing your export or active sessions, watch for:
- Logins from unfamiliar devices — "Samsung Galaxy" when you use iPhone
- Logins from unexpected locations — Cities you haven't visited
- Active sessions at suspicious times — 3 AM when you were asleep
- Multiple simultaneous sessions — You can only use one device at a time, but someone else could be logged in simultaneously
- Login from the same IP as someone you suspect — If they're on your WiFi, IPs may match
Analyzing Your Export with ForensAI
Facebook exports are JSON files that are nearly impossible to read manually. ForensAI scans your export for:
- Login anomalies — Unfamiliar devices, unknown IPs, impossible travel
- Security events — Password changes, 2FA toggles, recovery email changes
- Activity patterns — Access during times you weren't active
- Location correlation — Flag activity near addresses you specify (ex's home, etc.)
The analysis runs 100% on your device—your Facebook data never leaves your phone. This matters when you're dealing with sensitive evidence.
Free scans show top findings. Full Forensics ($179) unlocks complete analysis + PDF reports for legal documentation.
After You've Documented Everything
Once you have evidence documented:
- Change your password to something completely new (not a variation of your old one)
- Enable two-factor authentication — Settings → Password and security → Two-factor authentication
- Log out other sessions — In "Where you're logged in," tap each suspicious session and "Log out"
- Review connected apps — Settings → Apps and websites → remove anything suspicious
- Check Messenger — Messenger has its own settings for active sessions
If You Need the Evidence for Legal Purposes
For restraining orders, divorce proceedings, or police reports:
- Keep your original export ZIP file — Don't modify it; courts prefer unaltered evidence
- Generate a ForensAI PDF report — Full Forensics ($179) creates timestamped reports with all findings
- Document the timeline — When you noticed signs, when you confirmed access, when you locked them out
- Consult an attorney — They can advise on how to present digital evidence in your jurisdiction
Related Guides
- How to Check if Someone Accessed Your Google Account
- Signs Your Phone is Being Monitored
- Using Digital Evidence in Divorce Cases
ForensAI is an educational tool for personal use. For legal matters requiring certified evidence or expert testimony, consult a licensed forensic examiner or attorney.