Is someone checking your browsing?
This website will appear in your browser history. If you're concerned someone may be monitoring your internet use, consider using a trusted friend's device, a library computer, or your browser's private/incognito mode. You can press Quick Exit or hit Escape at any time to leave this site quickly.
Learn more about staying safe online
Someone accesses your accounts by using a session that's already logged in — such as a browser you forgot to sign out of on a shared device, or by copying your login session data.
What You Might Notice
Your account shows active sessions on devices you don't recognise
Check the 'active sessions' or 'logged-in devices' section of your accounts.
Someone is reading new messages in real-time
Messages are marked as read before you open them, or the other person responds to things instantly.
Account activity at times when you weren't online
Login timestamps or activity logs show use when you were asleep or away.
What You Can Do
Sign out of all sessions on important accounts
Most platforms have a 'Sign out everywhere' option in security settings.
Never save passwords on shared or public devices
Always use private/incognito mode on shared computers and sign out when done.
Check your active sessions regularly
Review logged-in devices weekly on your key accounts.
Important: This resource provides general information, not personal advice. Every situation is different. The actions suggested here may not be safe in your specific circumstances — particularly if the person causing harm could notice changes to your devices or accounts. Always consider your physical safety first.
If you need personalised support, contact 1800RESPECT (1800 737 732) or your local specialist domestic violence service. If you are in immediate danger, call 000.
Maintaining persistent access to victim's logged-in sessions by keeping devices logged in, copying session tokens, or exploiting 'remember this device' features. Allows perpetrator to monitor accounts without triggering new login alerts, making detection more difficult.
Active Session Monitoring Regularly review active sessions on all accounts. Terminate unrecognised sessions.
SAFE-M-0047
Session Termination Use 'sign out all sessions' feature after credential changes.
Detection Indicators
ID
Detection Indicator
SAFE-D-0043
Unknown Active Sessions Session review shows sign-ins from unrecognised devices or locations.
SAFE-D-0044
Unauthorised Account Activity Settings changed or content accessed without user action. Review platform activity logs.
The TFA Matrix is a research framework under active development. Technique classifications, detection methods, and mitigations reflect current understanding and are subject to revision. This framework does not constitute forensic methodology, legal evidence standards, or clinical diagnostic criteria. Practitioners should apply professional judgement appropriate to their discipline and jurisdiction.