The question of how to see what accounts were on an Android phone often arises in situations where the device has passed to a new owner or after a reset. Users are trying to make sure that there are no digital traces of previous owners left on the gadget, or are trying to restore access to forgotten services. In the ecosystem Android accounts are the foundation of most applications, and their deletion does not always occur without leaving a trace on the system.
There are several levels of depth at which data about past connections can be stored. From a banal list in the settings to hidden system logs, access to which requires certain knowledge. It is important to understand that the standard interface is not always willing to reveal information about the “ghosts” of the past, so you will have to use a combination of verification methods.
If you bought a used smartphone or simply want to carry out digital hygiene of your device, you need to know where to look for information. In this article, we will look at both standard methods and more advanced methods of analyzing the system, which will allow us to identify any hidden accounts.
Checking current and active accounts in the settings
The most obvious and accessible way to start a search is in the settings menu of the device itself. All currently active profiles that have data synchronization rights are displayed here. To do this, you need to go to section Settings → Accounts and synchronization (or simply Accounts depending on the shell version).
In this list you will see logos of services such as Google, Samsung Account, Mi Cloud or other manufacturers. By clicking on a specific profile, you can see details: email address, date of last synchronization, and a list of applications that this account has access to. This is a basic level of verification, which shows only “live” connections.
However, it is worth considering that if the account was deleted correctly through the settings menu before selling the phone, it will not be on this list. The Android system, when uninstalled normally, clears this registry. However, checking this section is required before proceeding further, as sometimes users simply log out of the profile without deleting it completely.
- 🔍 Open settings and find the "Accounts" or "Users and Accounts" section.
- 📱 Check for Google profiles, social networks and cloud storage.
- ⚙️ Click on each profile to see the associated synchronization services.
⚠️ Attention: The presence of someone else's account in this list means that the previous owner did not perform a hard reset or simply forgot to log out. Do not delete accounts if the phone does not belong to you, this may block the device.
The settings interface may vary on different smartphones. For example, on Xiaomi the path may lie through "Advanced settings", and on "pure" Android (Pixel, Motorola) it is located in the root menu. It is important to carefully study all subsections, since some manufacturers place their service accounts in a separate menu at the very top of the settings list.
Analysis of traces after resetting to factory settings (Factory Reset)
Many users mistakenly believe that the procedure Hard Reset or resetting to factory settings completely erases any information about previous owners. In fact, Google's FRP (Factory Reset Protection) protection mechanism works differently. If the account was not removed from the settings before resetting, the system will require you to enter the password for the last used profile upon first activation.
This means that the very fact of having an FRP lock already indicates which account was last on the device. The system remembers the account hash in a protected section of memory that is not affected by normal formatting of user data. This was done specifically to protect against theft.
If the phone was reset correctly (the account was deleted before the reset), then there will be no traces left in the activation interface. But in some cases, when using custom recovery or an incorrect reset, artifacts may remain in system folders, although for the average user they are practically invisible without root access.
adb shell pm list packages | grep com.google
Using debugging tools ADB (Android Debug Bridge), you can try to get a list of packages associated with accounts that could remain in the system cache. The command above will display lists of Google packages, among which you can find specific configuration files indicating past connections, although modern versions of Android actively encrypt this data.
☑️ Checking the cleanliness of the device
Viewing the history of actions through Google Account (web version)
The most reliable way to find out which devices and accounts interacted with your profile (or a profile to which you have access) is using the Google web interface. When you go to the security settings of your Google account through a browser, you will see the “Your Devices” section.
This displays a detailed history of all the gadgets on which you logged into this profile. You'll be able to see your phone model, last login date, and even approximate location. This allows you to understand whether a specific phone has ever been linked to your mail.
In addition, in the "Third-party applications with account access" section you can see which services have used profile data on this device. If you see an unfamiliar application or device, this is a reason to immediately change your password and revoke access.
| Data type | Where it is displayed | What it shows |
|---|---|---|
| Devices | myaccount.google.com/device-activity | Model, login date, activity status |
| Applications | Section "Security" | Third-party software with access to data |
| Account logins | Section "Security" | IP addresses and time of last authorizations |
| Backups | Google Drive → Backups | Availability of backups from a specific device |
This method will not show accounts that were on the phone, but do not belong to you, if you do not have access to them. However, if you are checking your own phone for unauthorized access, this is the best tool. It shows the real picture of activity from the cloud, not local files.
What to do if someone else's device is found?
If in the list of your devices you see a phone that does not belong to you or that you sold, immediately click "Sign Out" on that device. After that, change the password for your Google account and enable two-factor authentication to protect your data.
Using third-party applications to audit the system
For a more in-depth analysis, you can use specialized utilities from Google Play. There are account manager applications and security auditors that scan the system for residual configuration files. They can show hidden services that are not displayed in the standard menu.
One of these tools is Account Manager or similar utilities with access rights to system settings. They allow you to export a list of all account types registered in the system. Even if the profile itself is deleted, the account type (for example, “Dropbox” or “Skype”) may remain in the system as available for adding, which indirectly indicates past use.
It is also worth paying attention to file management applications with access to root directories (if you have root). The folder /data/system/users/ can store XML files with user configuration. Viewing these files may reveal usernames or account IDs that previously existed on the device.
- 🛡️ Install an antivirus or security scanner to check for hidden Trojans.
- 📂 Use a file manager with access to system folders to search for .xml files.
- 📋 Launch the application type "Audit" to view a list of installed services.
⚠️ Attention: Installing third-party applications that require deep access to the system may violate the warranty or lead to unstable operation. Use only proven utilities with high ratings in the official store.
Remember that most of these applications work within the limitations imposed by the modern version Android. Without superuser rights (root), they will see approximately the same thing as you see in the settings, but in a more convenient format. Full auditing is only possible on rooted devices.
Before installing any auditing applications, make a complete backup of your data. Unknown software may accidentally damage system files during scanning.
Checking event logs and synchronization
Android system logs contain a huge amount of technical information. Although ordinary users rarely look there, it can be useful to answer the question “how to see what accounts there were.” Synchronization logs often contain references to email addresses in encrypted or clear form, depending on the OS version.
You can view the logs through the menu Settings → About phone → Build number (press 7 times to enable developer mode), then Settings → For developers → Error log or by taking the log via ADB command adb logcat. In the data stream, you can search for keywords such as "account","sync","auth".
This method requires technical training. You will have to filter thousands of lines of code. However, if your account tried to sync recently, you can find traces of its activity in the Google Play Services logs. This is especially true if the device is unstable and constantly tries to connect to the network.
Also check your notification history. If the notification history saving feature is enabled on your phone (available on Android 11 and higher), you may see old messages from services like “Login with a new device” or “Account synchronization error”, where the email will be indicated.
adb logcat | grep -i"account"
Outputting this command in the terminal will show all system messages related to account management. This is a powerful diagnostic tool, but it shows the current status and recent history. Old data, if it has not been overwritten, can be stored in a circular log buffer.
System logs are the “black box” of the phone. They store technical information about all processes, including attempts to log into accounts, even if the interface has already been cleared.
FRP protection and legal aspects of ownership
It is important to touch on the topic of reset protection (FRP). If you are trying to view accounts on a phone you found or purchased second-hand, and it asks for a password from someone else’s Google account, you are faced with a block. Bypassing this protection is illegal in most countries unless you own the device.
Google implemented this system to make smartphone theft pointless. Even after flashing, the phone will remain a “brick” without entering the last account data. Therefore, if your goal is to simply use the phone and not investigate, you will have to contact the previous owner to remove the device from its trusted list through the web interface.
There are services that offer FRP removal, but using them carries risks. You may install malware or compromise your phone's security modules. In addition, buying a phone with an active FRP lock is a risk of purchasing a stolen device.
⚠️ Attention: Attempts to hack other people's accounts or bypass FRP locks on devices that do not belong to you may be prosecuted by law. Always check the cleanliness of the device when purchasing.
If you are the owner and simply forgot the data, use the Google account recovery procedure. Do not try to reflash your phone; this will not remove the binding on Google servers. The only legal way is to restore access through the Google support form with identity confirmation.
Is it possible to delete an account remotely?
Yes, if you have access to your Google profile. Go to google.com/android/find, select your device and click "Clear device". This will delete all data and accounts, but the phone may still ask for a password the next time you turn it on, unless you have previously deleted the account in the settings.
Frequently asked questions (FAQ)
Can I see the password for the account that was on the phone?
No, passwords are stored in encrypted in a secure key store (Keystore). Even with root access, it is almost impossible to extract a working password in clear text due to the hardware encryption of modern processors.
Will traces of the account remain after flashing the phone?
With a complete flashing (wipe data + flash system), local traces are deleted. However, if the phone connects to Wi-Fi, it will send its ID (IMEI/Serial) to Google servers, and the server can remember which account was last by activating FRP.
How to find out if someone has logged into my account from this phone?
Go to the security settings of your Google account through the browser. In the "Your devices" section, check the list. If there is this phone number and a login time that you don’t recognize, it means you were logged in.
Does a factory reset delete search history and accounts forever?
A reset deletes data from the device. But the history of searches and actions is stored in the Google cloud (My Account → Data and privacy). To delete it, you need to go to the web version of the account and clear the history manually.
What should I do if the phone asks for an account that I did not create?
Most likely, the phone was reset without deleting the account by the previous owner. You need to find the seller or owner and ask him to remove the device from the list of trusted ones in the settings of his Google account remotely.