You can view a list of devices that have logged into your account, and revoke any sessions that you don't recognize.
-
In the upper-right corner of any page on GitHub, click your profile photo, then click Settings.
-
In the "Access" section of the sidebar, click Sessions.
-
Under "Web sessions", you can see your active web sessions.
Under "GitHub Mobile sessions", you can see a list of devices that have logged into your account via the GitHub Mobile app.
-
To see the web session details, click See more.
-
To revoke a web session, click Revoke session.
-
Optionally, to revoke a GitHub Mobile session, go back to the Sessions overview page and click Revoke next to the device you want to revoke.
Note: Revoking a mobile session signs you out of the GitHub Mobile application on that device and removes it as a second-factor option.