---
title: Remove permissions from old devices
---

## Theory

[Yesterday we audited services that can still access our accounts](/2016/10); today, we'll audit old devices.

When you get a new smartphone, one of the first steps is attaching email, wallets, and social accounts. Services that we
add often put the phone on a list of "trusted devices", which is convenient while we own the device. But when we lose,
sell, or replace a device, we rarely remove it from the trusted device list.

If someone happens upon an old phone of yours, you probably don't want them making purchases under your name. It's
important to notify your accounts as soon as you decommission an old device.

## Homework

Log on to the dashboard of your commonly used accounts and delete any old devices that you no-longer own or use. While
you're there, you can verify that none of these devices have been accessing your account.

Below are direct links for a few popular services. Try to check _all_ accounts that you authenticated old devices with,
even if they're not listed below.

- [Google](https://security.google.com/settings/security/activity)
- [Facebook](https://www.facebook.com/settings?tab=security&section=devices&view)
- [Twitter](https://twitter.com/settings/your_twitter_data)
- [Dropbox](https://www.dropbox.com/account/#security)
- [LinkedIn](https://www.linkedin.com/psettings/sessions)

---
title: Remove permissions from old devices
---

## Theory

[Yesterday we audited services that can still access our accounts](/2016/10); today, we'll audit old devices.

When you get a new smartphone, one of the first steps is attaching email, wallets, and social accounts. Services that we
add often put the phone on a list of "trusted devices", which is convenient while we own the device. But when we lose,
sell, or replace a device, we rarely remove it from the trusted device list.

If someone happens upon an old phone of yours, you probably don't want them making purchases under your name. It's
important to notify your accounts as soon as you decommission an old device.

## Homework

Log on to the dashboard of your commonly used accounts and delete any old devices that you no-longer own or use. While
you're there, you can verify that none of these devices have been accessing your account.

Below are direct links for a few popular services. Try to check _all_ accounts that you authenticated old devices with,
even if they're not listed below.

- [Google](https://security.google.com/settings/security/activity)
- [Facebook](https://www.facebook.com/settings?tab=security&section=devices&view)
- [Twitter](https://twitter.com/settings/sessions)
- [Dropbox](https://www.dropbox.com/account/#security)
- [LinkedIn](https://www.linkedin.com/psettings/sessions)

Update twitter active sessions link
Update twitter active sessions link