This means as well you will receive a message if somebody tries to enter, because you will receive a 2FA-code without having initiated it. And who wants in has no chance without the additional code send to your smartphone. When your account is safe, then you can unsync the unknown device for good. But changing the PW first is important, because this already locks out the intruder. Even when they still show up, access is denied.