So yesterday I got a notification from my cloud storage service saying that a new device was authorized to access my account. The catch? I haven’t logged in from any new devices recently, just my usual laptop and phone. I double-checked the device list in my account settings and saw an unfamiliar device with a location that’s not even close to where I live. I immediately changed my password and enabled two-factor authentication, but I’m still uneasy. I also scanned my laptop and phone for malware but found nothing suspicious. My main worry is whether this was a phishing attempt or if someone actually compromised my account somehow. Has anyone else experienced this kind of random device authorization alert without having logged in from anywhere new? What steps should I take beyond what I’ve done to make sure my account is truly secure? Also, how reliable are those device location tags - could they be spoofed or inaccurate?

That unknown device with a weird location definitely sounds sketchy. Even though you changed your password and enabled 2FA (which is great), I’d also check if your cloud service offers any session management or device revocation options - sometimes you can force logout all devices except the ones you trust. Also, keep an eye on your account activity logs if they have them; they can show you if anything suspicious happened after that device showed up.

About the location tags, they can be off sometimes because they’re usually based on IP addresses, which can be routed through VPNs or proxies. So it might not be an exact location, but combined with a device you don’t recognize, it’s a red flag. If you haven’t already, contacting your cloud provider’s support to report this might be worth it - they might have additional tools or insights to help secure your account.