Where to find Apps and sessions
Start in the X account you own and intend to review. Open Settings and privacy, then find Apps and sessions. If a mobile menu does not show the expected label, follow the Apps and sessions link inside X’s official access-management instructions. Check which account is signed in before changing anything.
Do not enter your password into a separate “session checker” found through a search ad or an unsolicited message. You need the account’s own controls, not a third party’s list of supposed logins.
Which list answers your question?
| What you want to do | Review | Record before acting |
|---|---|---|
| Stop a service you previously authorized | Connected app permissions | App name, publisher, purpose and whether you still use it |
| End access from a device you no longer use | Login sessions | The displayed session label and whether you recognize it |
| Understand an unfamiliar entry | The relevant app or session detail | What is known, what is uncertain and your next check |
| Change whether contacts can find your profile | Separate discoverability settings | Your preferred visibility; an app audit does not answer this |
An unfamiliar label is a reason to investigate, not an identification of another person. Avoid treating a location label as a home address or a public username match as proof of who operated the session.
Revoke an app or end a session
For a connected app, inspect its listed permissions and use Revoke access when you decide to disconnect it. For sessions, review the displayed login information and use the individual logout control or Log out all other sessions when that is your intended action. Logout prevents further actions from those sessions but may leave previously cached data on their devices. X documents these controls and their limits.
Keep your review small enough to explain. Before revoking an app you still depend on, note which workflow it supports. After the change, revisit that workflow and record whether you still need it. This prevents a cycle of indiscriminate removal followed by hurried reauthorization.
If you suspect a malicious app, revoke its access and change your password using X’s own controls. X gives the same advice when you previously gave your password to an app you no longer trust. Read X’s password and suspicious-app guidance.
A private record you can reuse
Write one row per decision: item → why it is familiar or unfamiliar → action → date → follow-up. Keep the note private. Do not post screenshots containing account emails, session details or access tokens to ask strangers to identify an entry.
Examples of useful follow-up questions are “Does this old publishing service still have a purpose?” and “Have I finished signing out of the shared computer?” These are checks you can perform. “Who is the stranger behind this location?” is an inference that this screen cannot settle.
Keep public-profile checks separate
For the next privacy task, review X email and phone discoverability. For a public profile URL or handle, use the X profile lookup guide.
If you also want to inspect a known public handle across other services, TraceSeek’s public-username workflow is a separate option. Public matches are leads for manual review. They cannot expose private X sessions, revoke an app, remotely erase a device or establish that two accounts belong to the same person.