What steps should I take after an unexpected email login from a new device?

[AbigailW]

I just got a notification that someone logged into my email from a new device in a different state. I changed my password immediately, but I’m wondering if I should do more, like checking for session hijacking or a keylogger on my own machine.

[Riley38]

That sounds alarming. I would start by checking the login activity for your account and the devices that have been signed in. I changed the password and turned on two factor authentication.

[OliviaHM]

I tried to run a quick malware scan on my laptop and looked through running apps, but nothing obvious showed up. I did notice my antivirus updated and ran, which helped ease my worry a bit.

[EleanorR]

Sometimes these alerts feel bigger than they are. On a trip I got a similar notification and it turned out to be a legitimate login from a hotel laptop with a VPN. Still, it nudged me to review what devices are trusted.

[NoraP]

Do you have two factor enabled?