Device security and sign-in alerts

Review the devices signed in to your account, sign them out remotely, and understand the New device sign-in alert and what to do if it wasn't you.

Your devices, on the Security page

The Your devices section of the Security page lists every browser and device that has signed in to your account — with its approximate location, IP address, when it was first seen and when it was last active. Your current browser carries a This device badge.

• Sign out ends a device's sessions within a couple of minutes.
• Sign out all other devices does the same for everything except the browser you're using — and also invalidates every "remember this device" 2FA exemption.

A signed-out device's next sign-in is treated as unrecognized: it triggers a fresh alert and, if you use 2FA, the full two-factor prompt.

The "New device sign-in" alert

Whenever your account is accessed from a device it hasn't used before, MarketplaceHub emails you — subject "Did you just sign in from …?" — with the device, approximate location, IP address and time, plus an in-app Security notification. This alert is always sent; muting the Security category hides only the in-app copy, never the email.

• If it was you — ignore it; the device is now recognized.
• If it wasn't — change your password and click Sign out all other devices, both on the Security page. With 2FA enabled, an unknown device can never reuse a "remembered" 2FA exemption — the challenge always appears.

Notes

• Locations are approximate — they come from the sign-in IP address, so a VPN or mobile network can show an unexpected city.
• Sensitive actions (signing out devices, setting a first password) may ask you to sign in again first — nothing happens until you confirm on the page afterwards.