Monitor active sessions
A session list should display device type, approximate location, and last active time. Review it frequently and revoke any unknown entries. Revoke first — ask questions later.
Name your devices
Give friendly names to known devices (e.g., “Work laptop”) so you can spot unfamiliar devices quickly.
Set up alerts
Enable email/push alerts for new sign-ins and withdrawal events. Fast alerts let you act before substantial loss occurs.