Login Alerts on Social Media: Turn Them On
Login alerts tell you when someone signs in to your account from a new device. How to turn them on, how to tell real alerts from fake ones, and exactly what to do when you get one.
A login alert is a short message: "New login to your account from a Windows computer in a city you have never visited. Was this you?" When you are expecting it, you ignore it. When you are not, it is your earliest warning that someone has your password. The sooner you act, the easier it is to keep control.
How to turn them on
In each app, open Settings and look for Security, Password and security or Login activity. Turn on alerts for unrecognised logins, and choose where they go: app notification, email or both. Do this for:
- Facebook and Instagram
- TikTok, X and LinkedIn
- Snapchat and other messaging platforms
- Your email, which usually has alerts on by default
When an alert arrives
| If | Then |
|---|---|
| It was you on a new device | No action needed. |
| You do not recognise it | Change your password, log out other sessions, and check settings (below). |
| You also got a code you did not request | Someone has your password. Do not share the code, and change the password now. |
| You cannot log in | Start recovery through the official app. See your first hour after an account takeover. |
After an unrecognised login
- Change your password from the app or website, not a link.
- Log out of all other sessions.
- Turn on two-step verification if it is not on.
- Check your email and phone on the account.
- Review connected apps and recent messages or posts.
- Change the password anywhere you reused it.
Fake login alerts are a phishing trick. An email saying "Someone logged in, click here to secure your account" may lead to a fake login page. Always check through the app itself.
A note on locations
Location estimates can be wrong, especially on mobile data or when using a VPN. Focus on the device type and time. If you are unsure, it is safer to log that session out and change your password.
Received a login alert email? Paste it into CyberWatch AI Scan for a free check before clicking anything.
Alerts are part of a secure setup; see securing social media accounts and our guide to account takeover and identity protection.
Frequently asked questions
Is a login alert always a sign of a hack?
No. It may be you on a new phone, browser or app. But if you do not recognise the device, time or place, treat it as a warning and secure your account.
How do I know a login alert email is real?
Do not click links in it. Open the app or website yourself and check the security or login activity section. Genuine alerts will match what you see there.
Can I get alerts for all my social accounts?
Most major platforms offer them. Look in each app's security settings for 'login alerts', 'unrecognised logins' or similar.
Sources
- Social media: how to use it safely, UK National Cyber Security Centre
- Recovering a hacked account, UK National Cyber Security Centre
- How To Recognize and Avoid Phishing Scams, US Federal Trade Commission
