Symptoms
- Extra user account visible at the login screen
- Account name you don't recognize in user settings
- Files or activity under an account you didn't create
- Login screen shows more profiles than expected
Likely causes
- CommonLeftover setup or guest accountSome computers come with a default guest or manufacturer setup account you may not have noticed before.
- PossibleAccount created by someone else with physical accessA family member, roommate, or repair technician could have created an account without mentioning it.
- Less commonUnauthorized remote account creationIf remote access was compromised, an attacker could theoretically create a new local account, though this is less common than other forms of unauthorized access.
What to do
- Open user account settings and list every account present on the computer.
- Check the account's creation date if available, and compare it to devices you know were set up around that time.
- Ask any family members or housemates with physical access if they created it.
- If it's an unnecessary guest or unused default account, disable or delete it through account settings.
- Change your own admin password if you suspect the account wasn't created by someone with legitimate access.
- Run a malware scan and check remote access settings if unauthorized creation is suspected.
- Review recent login history for the unfamiliar account to see when and how it was used.
When to call a pro
If you strongly suspect unauthorized remote access created the account, a professional should audit the system before you continue using it normally.
Safety
Generally low risk
Generally low risk for a careful person. Stop if anything looks different from what this guide describes.