The present disclosure relates to a method and a device for detecting web address hijacking. The method includes: obtaining a currently accessed web address and a target directed web address from a current web address access instruction; determining a secure directed web address from the currently accessed web address according to a history of web address access instructions; and determining whether the target directed web address is hijacked according to the secure directed web address.