Lately, I've been getting login alerts from my email provider saying there was a sign-in from a new device or location. Thing is, I haven’t logged in from anywhere unusual. I’ve changed my password a couple of times just to be safe, enabled two-factor authentication, and scanned my computer for malware, but the alerts keep coming.

What’s odd is that the alerts mention locations that seem kinda random—sometimes a city across the country, sometimes even abroad. I’m wondering if it’s some kind of spoofing or if someone really is trying to get into my account without success. I’m also worried that maybe there’s some app or service I authorized a long time ago that’s causing these notifications.

Has anyone else experienced something like this? How do you figure out if it’s a genuine hack attempt or just false alarms? And if it’s the former, what’s the best way to make sure my account is truly secure beyond the basics?

That sounds super frustrating! Sometimes those login alerts can be triggered by VPNs, proxy services, or even your ISP routing traffic through different locations, which might explain those random cities popping up. It’s also worth checking your account’s connected apps or authorized devices list—sometimes old apps with lingering permissions can cause weird activity.

Since you’ve already done the big stuff like changing passwords and enabling 2FA, maybe try logging out of all devices from your email security settings and then re-authorize only the ones you use. Also, double-check if your email provider offers a security activity log or session history—it can help you see exactly what devices or IPs accessed your account.

If it keeps happening, reaching out to your provider’s support might be a good move. They can sometimes spot suspicious patterns that aren’t obvious from your end. Meanwhile, keep an eye on any unexpected emails or password reset requests just in case. Stay safe!