Configuration › Authorized Devices answers what can get into my account.It shows three lists:
Browsers
The browsers you have signed in from, with their device type.
Passkeys
The ones you have registered, with the device for each one.
Wallets
The Web3 wallets you have connected, if you have connected any.
From any of the three you can remove whatever you no longer recognize or no longer use. The removed device loses access.
When you change phones, remove the passkey and the browser from the old one. It takes a minute and stops a device you no longer have from still being able to get in.
Configuration › Connection Log answers who has signed in and when.It is the history: date, device and origin of every sign-in, plus the sessions that are open right now.
If you see a sign-in you don’t recognize: close the open sessions, remove the unknown devices and turn on a passkey if you don’t have one. In that order.
If the strange sign-in came with changes to your causes or your payments, write to support telling us what you saw. How