TikTok's Security checkup groups recovery contacts, two-step verification, trusted devices and account activity. A device you do not recognize may be an old phone with a changed name, or it may be someone using your account. Do not rely on an approximate location alone; compare the device, time and your own sign-ins. If the entry is unexplained, removing it is only the first step, because a known password or compromised mailbox can let it return.
Before you start
Use a phone you trust and open TikTok from its normal icon, not a link in a warning message. Verify that the account's email and phone number are accessible to you. If you share an account with staff, identify their legitimate devices first; a shared password is still an access risk to resolve after containment.Do it step by step
- Tap Profile, Menu, Settings and privacy, Security and permissions, then Security checkup. Inspect security activity and Manage devices; TikTok's current help describes these controls in this area.
- Compare each entry with devices you own or recently replaced. If one is unexplained, record its details, then use Delete or Remove for that trusted device. Do not approve a new login prompt from a device you did not initiate.
- Change the TikTok password to a unique one. If the same password was used for the recovery email or another service, change those too. Secure the mailbox before an attacker can reset TikTok again.
- Check Account information for the linked email and phone number. Replace any value you did not set, then verify your own contacts. Set up two-step verification with at least two methods where available and review whether a passkey fits your device-recovery plan.
- Inspect outgoing DMs, posted videos, profile bio, linked accounts and purchase or balance activity for unauthorized changes. Report account compromise through TikTok's official in-app support if evidence remains.
- Revisit Manage devices after a fresh sign-in and watch for another unexplained entry. Tell contacts by a separate route if your account sent them a scam link or request for money.