The device list in your account tracks all the computers or mobile devices logged into your account. If you see a device, you don't recognize it. You can delete any one or all of them to ensure that if they try to login again, they will be required to go through the standard 2-step authentication method. We would also recommend you change your password.
Click on Settings/Security/Delete All