Remote access to your phone happens through apps, accounts, or settings you may not know are active

Someone can view your phone's screen, install apps, read messages, or access your location without touching the device itself. This happens through three main routes: a remote access app you installed (often without realizing what it does), your cloud account credentials shared or stolen, or settings that let another device control yours. The good news is that each route has a specific fix, and you can check for all three without special tools.

The most common scenario is a remote access app installed on your phone — software like TeamViewer, AnyDesk, or Chrome Remote Desktop that was meant for tech support but is being misused. The second is someone logging into your Google account (Android) or Apple ID (iPhone) from another device. The third is less common but real: settings like Find My iPhone or Find My Mobile that were set up to let someone else locate or control your phone.

Key Takeaways

  • Check your phone's installed apps for remote access software like TeamViewer, AnyDesk, or Chrome Remote Desktop, and uninstall anything you do not recognize.
  • Review your Google account (Android) or Apple ID (iPhone) for active sessions and sign out any devices you do not own.
  • Disable location sharing, Find My iPhone, or Find My Mobile, and change your account password from a device you trust.
  • If you suspect ongoing access, restart your phone in Safe Mode to see if the problem stops, which tells you whether a third-party app is involved.
  • After removing access, turn on two-factor authentication so someone cannot log back in even if they have your password.

Find and remove remote access apps from your phone

Open your phone's app list and look for software designed for remote control. On Android, go to Settings > Apps and scroll through the full list. On iPhone, open Settings > General > iPhone Storage to see every app installed. Look specifically for TeamViewer, AnyDesk, Chrome Remote Desktop, Splashtop, or any app with "remote," "support," or "access" in the name that you did not install yourself.

If you find an app you do not recognize, tap it and select Uninstall (Android) or Remove App > Delete App (iPhone). Do not just hide it — fully remove it. If you see an app you installed for legitimate tech support but no longer need, uninstall that too. The person helping you no longer needs access once the problem is fixed.

Some remote access apps hide themselves or use misleading names. If your phone feels slow, drains battery quickly, or shows data usage you cannot explain, restart it in Safe Mode. On Android, hold the power button, then press and hold "Power off" until Safe Mode appears. On iPhone, restart the phone normally, then immediately hold the volume-up button until the lock screen appears. In Safe Mode, third-party apps do not run. If the phone behaves normally, a third-party app is the culprit — go back to your app list and remove anything suspicious.

Check your Google account or Apple ID for unauthorized sessions

Someone with your password can sign into your account from another device and see your messages, photos, location, and more. Check what devices are currently signed in. On Android, go to myaccount.google.com, select Security on the left, scroll to "Your devices," and tap Manage all devices. You will see every device logged into your Google account, where it is located, and when it last connected. If you see a device you do not own, tap it and select Sign out.

On iPhone, go to Settings > [Your Name] > Password & Security > Devices. This shows every Apple device signed into your Apple ID. Tap any device you do not recognize and select Remove. After removing unknown devices, change your password immediately. Go to myaccount.google.com > Security > Password (Android) or Settings > [Your Name] > Password & Security > Change Password (iPhone). Use a strong password you have never used before — at least 12 characters with uppercase, lowercase, numbers, and symbols.

Check your recovery email and phone number too. On Android, go to myaccount.google.com > Personal info and verify the recovery email and phone number are yours. On iPhone, go to Settings > [Your Name] > Password & Security > Recovery Email and Recovery Phone Number. If either is wrong, change it immediately. Someone with access to your recovery email can reset your password.

Turn off location sharing and remote management features

Find My iPhone and Find My Mobile let someone else locate your phone or erase it remotely if they have your account password. On iPhone, go to Settings > [Your Name] > Find My > Find My iPhone and turn it off. On Android, go to Settings > Google > Manage your Google Account > Security > Find My Mobile and turn it off. These features are useful if you lose your phone, but they are also a way for someone to track you.

Check location sharing separately. On iPhone, go to Settings > Privacy > Location Services and review which apps have permission. Turn off location for any app that does not need it. On Android, go to Settings > Location and review which apps have permission. Also check Settings > Google > Manage your Google Account > Data & Privacy > Web & App Activity to see if location history is on — turn it off if you do not want Google storing where you go.

If you share your location with family members through Find My (iPhone) or Family Link (Android), review who has access. On iPhone, go to Settings > [Your Name] > Find My > Find My Friends and remove anyone you do not want tracking you. On Android, go to Settings > Google > Manage your Google Account > Data & Privacy and check Family Link settings.

Set up two-factor authentication to prevent future access

Two-factor authentication means someone needs both your password and a code from your phone to sign in, even if they steal your password. On Android, go to myaccount.google.com > Security > 2-Step Verification and follow the steps. Google will ask you to confirm your phone number and will send a code when someone tries to sign in from a new device. On iPhone, go to Settings > [Your Name] > Password & Security > Two-Factor Authentication and turn it on. Apple will send a notification to your trusted devices when someone tries to sign in.

Choose an authentication method you control. A code sent to your phone is more secure than a backup code written down. If you use an authenticator app like Google Authenticator or Microsoft Authenticator, write down the backup codes and store them somewhere safe — not on your phone or in a cloud account someone else can access.

What to do if you think someone is still accessing your phone

If you have removed apps, signed out unknown devices, and changed your password but still see signs of access — messages you did not send, apps opening on their own, or unusual data usage — the access may be happening through a different route. Restart your phone completely. On Android, hold the power button and tap Power off, wait 10 seconds, then turn it back on. On iPhone, hold the side button and volume button together until the power-off slider appears, then turn it back on.

After restarting, check your phone's activity again. Open Settings and look at battery usage, data usage, and recently installed apps. If you still see suspicious activity, consider backing up your important data (photos, contacts, messages) to a computer or cloud account you control, then doing a factory reset. This erases everything and reinstalls the operating system, removing any hidden access. On Android, go to Settings > System > Reset options > Erase all data. On iPhone, go to Settings > General > Transfer or Reset > Erase All Content and Settings. After the reset, sign back in with your new password and two-factor authentication turned on.

Frequently Asked Questions

Can someone access my phone through WiFi without installing an app?

Not directly. They would need either an app on your phone, your account password, or control of your WiFi network itself. If you are on public WiFi, someone on the same network cannot see your messages or apps without one of those three things. Use a VPN on public WiFi to add a layer of protection, but the main defenses are the ones above.

What if I do not recognize the device in my account but cannot remove it?

Change your password immediately from a device you trust. This signs out all other devices automatically. If you still cannot remove it after changing your password, contact Google Support (Android) or Apple Support (iPhone) and explain that your account may be compromised. They can help you regain control.

Does restarting my phone stop remote access?

A restart stops most remote access apps temporarily, but if the app is still installed, it will start again when your phone boots up. A restart is useful for checking whether a third-party app is the problem — if your phone works normally in Safe Mode, you know an app is involved. But you still need to uninstall it.

Is it safe to use remote access apps for tech support?

Yes, if you uninstall them when the support session ends. TeamViewer, AnyDesk, and Chrome Remote Desktop are legitimate tools. The risk comes from leaving them installed after you no longer need them. Ask the person helping you to confirm when the session is over, then uninstall the app yourself.

Should I tell someone if I think they are accessing my phone?

That depends on who it is and why you think they have access. If it is a family member or partner and you are concerned about control or privacy, that is a conversation to have. If you believe it is someone you do not know or someone who is harassing you, do not confront them — instead, change your password, remove access, and consider reporting it to local police or the FBI's Internet Crime Complaint Center if the access is part of a larger pattern of harassment.