Is someone reading your messages?

iPhoneAndroidUpdated

Someone mentions a conversation you never told them about, or a WhatsApp chat shows as read before you opened it, and you start to wonder who else can see your messages. The first thing to check is whether another device is linked to your messaging app or signed in to your account. Each of these has a list you can check and clear in a few minutes.

Quick answer

Check the device lists. In WhatsApp, open Linked Devices and log out anything you don't recognise. On iPhone, check Text Message Forwarding and your Apple Account device list. In Google Messages, open Device pairing. Then review the devices signed in to your Google Account. Removing a device stops it receiving new messages.

How do you check WhatsApp linked devices?

WhatsApp lets you link up to four devices at a time to your phone, such as a computer, a browser running WhatsApp Web or a tablet, and each one can use your WhatsApp. WhatsApp says linked devices still need your primary phone to be linked in the first place, and it recommends checking the list regularly.

  1. iPhone: open WhatsApp, tap Settings or your profile picture, then tap Linked Devices.
  2. Android: open WhatsApp, tap More options (the three dots), then Linked devices.
  3. Tap any device you don't recognise, then tap Log Out and confirm.
  4. Turn on two-step verification in WhatsApp's settings for an extra layer of protection.

WhatsApp automatically disconnects linked devices after 30 days of inactivity. It also recommends keeping push notifications on: if a notification shows a device you don't recognise, tap it to review and remove the device. WhatsApp notes it can't tell you who accessed your account, or when or where.

Can someone read your iMessages from another device?

Yes, if another device is signed in with your Apple Account or set up to receive your texts. Apple's Messages in iCloud keeps your whole message history up to date on every device using it. Text Message Forwarding separately lets other devices send and receive the SMS, MMS and RCS messages from your iPhone.

Check forwarding first:

  1. On your iPhone, go to Settings > Apps > Messages.
  2. Tap Text Message Forwarding to see which devices can send and receive text messages from your iPhone.
  3. Turn off any device you don't want there.

Apple notes that Text Message Forwarding is always on for each of your devices using Messages in iCloud, so a device on your account may appear here even if you never switched it on. To limit Messages to one device, Apple says to sign out of Messages on the other devices and turn off Messages in iCloud:

  1. Go to Settings > [your name], then tap iCloud.
  2. Tap See All next to Saved to iCloud.
  3. Tap Messages in iCloud, then turn off Use on this iPhone. Repeat on each device.

How do you see every device on your Apple Account?

Apple says devices signed in to your Apple Account can, depending on the device, sync with iCloud, receive two-factor verification codes, and even change your password. That's why an unfamiliar entry matters for messages and more besides.

  1. On iPhone, open Settings and tap [your name], then scroll down to the list of devices.
  2. Tap a device to see its details.
  3. If you don't recognise it, tap Remove from Account and confirm.
  4. On a Windows PC or Android phone, sign in at account.apple.com and select Devices.

A removed device won't come back unless someone signs in on it again, so change your Apple Account password as well. For a fuller walk-through of your Apple Account, see what to do if someone knows your iPhone passcode.

How do you unpair Google Messages for web?

Google Messages for web shows the conversations from your phone's Google Messages app on a computer. Google says unpairing helps keep other people from seeing your messages and sensitive information, such as two-factor verification codes. Only one computer can be active at a time, but you can pair on several.

  1. On your Android phone, open Google Messages.
  2. At the top right, tap your account menu, then Device pairing.
  3. To remove one computer, tap Delete next to it, then Unpair. To remove all of them, tap Unpair all computers.

Google says pairing happens from the phone, by tapping a matching emoji on it, and that if you don't use Google Messages for web for a few weeks you're unpaired automatically.

Which devices are signed in to your Google Account?

Your Google Account can hold Gmail and other messages, so it's worth checking too. Google lists devices where you're signed in now, or were in the last few weeks.

  1. Go to your Google Account and tap Security & sign-in.
  2. On the Your devices panel, select Manage all devices.
  3. Tap any device you don't recognise, then Sign out.
  4. If you see something unfamiliar, follow Google's steps to secure your account, starting with a new password.

Google says multiple sessions can appear for one device, and a recently reset device may still show up. The times shown are the last contact with Google, which can include background syncing, so a recent time doesn't always mean recent use.

What if it's a partner or someone you live with?

It's a common worry, and the steps above are the same whoever it is. Apple's Safety Check, on iPhone with iOS 16 or later, lets you review who has access to your information and the devices connected to your Apple Account, in one place: Settings > Privacy & Security > Safety Check. Apple advises thinking about how changes might affect your safety before you make them.

If you feel unsafe, the National Domestic Abuse Helpline, run by Refuge, is free on 0808 2000 247. In an emergency, call 999.

Where Failshot fits

Failshot doesn't see your accounts and doesn't detect linked devices, message forwarding, hacking or remote access. The device lists above are the way to check those. Failshot covers one thing: someone with your phone in their hands. It photographs whoever unlocks your phone while Failshot is on, and the camera light shows whenever it takes a photo.

On iPhone, you turn Failshot on and lock the phone, and whoever unlocks it lands in Failshot and is photographed. It doesn't photograph a wrong passcode at the iPhone Lock Screen. On Android it also photographs a wrong PIN, pattern or password at the lock screen. Switching it off needs Face ID or fingerprint, or your own Failshot PIN plus your answer, never your phone's passcode. Photos stay on your phone, with optional email alerts. It's for your own device only, and it's coming soon to iPhone and Android.

Questions people also ask

Can someone read my WhatsApp messages from another phone?

Only through a linked device or by having your phone or account. WhatsApp's Linked Devices list shows every device connected to your account, and you can log any of them out. Linking a new device needs your primary phone, and inactive devices are disconnected after 30 days.

Will someone know if I remove their device?

They will lose access, which they may notice. Apple advises considering the potential impact on your safety before making changes. If you're worried about how someone will react, you can talk it through first with the National Domestic Abuse Helpline on 0808 2000 247.

Does turning off Messages in iCloud delete my messages?

Apple says that to remove your messages from iCloud, you turn off Messages in iCloud on each device. If you only want to stop one device receiving texts, turning it off in Text Message Forwarding is the smaller change.

Can WhatsApp tell me who logged into my account?

No. WhatsApp says it can't provide information about who accessed your account or the time and location it was accessed. What you can do is check Linked Devices, log out anything unfamiliar, and turn on two-step verification.

How do I stop my texts appearing on my iPad or Mac?

On your iPhone, go to Settings > Apps > Messages > Text Message Forwarding and turn the device off. If that device uses Messages in iCloud, also sign it out of Messages or turn off Messages in iCloud on it.

Sources