Skip to main content

Active Sessions and Signing Out Devices

Each time an owner account signs in, Etalasse records one session. In Settings > Security > Active sessions you can see where your account is signed in and sign out devices you do not recognize.

What the session list shows​

The list is sorted by most recent activity and shows only sessions that are still valid.

Active sessions card: devices signed in right now, This device and 2FA badges, a Sign out button per row, and Sign out all other devicesActive sessionsDevices that are signed in to your account right now.Sign out all other devicesChrome on macOSThis device2FA203.0.113.x · Active Just now · Signed in 12 Oct 2026 08:10Etalasse app · Android2FA198.51.100.x · Active 2 h ago · Signed in 11 Oct 2026 19:02Sign outSafari on iPhone2FA203.0.113.x · Active 3 days ago · Signed in 8 Oct 2026 07:45Sign outFirefox on Windows192.0.2.x · Active 5 days ago · Signed in 6 Oct 2026 22:31Sign out123
The Active sessions card: (1) the This device and 2FA badges, (2) Sign out for a device you don't recognise, and (3) Sign out all other devices.

The Active sessions card: (1) the This device and 2FA badges, (2) Sign out for a device you don't recognise, and (3) Sign out all other devices.

ColumnMeaning
DeviceDevice and browser/app name, from the data sent at sign-in
IPOnly the prefix of the IP address (for example 203.0.113.x), never the full address
Last activeFor example "2 hours ago"
This deviceBadge on the session you are using now
2FABadge showing the session signed in with two-factor authentication

If you see a hint that this device uses an older sign-in, that is normal for anyone who signed in before this release. Signing out other devices refreshes it.

Sign out one device​

On the session row, press Sign out. That device is refused on its next request. If you sign out this device, it is the same as a normal sign-out.

Sign out all other devices​

Press Sign out all other devices and confirm. Your current session stays active. Etalasse sends a notification email. Use this if you suspect someone else is using your account or you lost a device.

What a signed-out device sees​

It does not try to renew the session. It is taken to the sign-in screen with the message You were signed out, and must sign in again (with a 2FA code if enabled). The effect is immediate; on other devices served by a different server it can take up to about 30 seconds.

Session length​

  • A session lasts 8 days and is extended automatically (sliding) each time the app renews it. A device unused for longer signs out by itself.
  • If you were signed in before this release, you are not signed out by the release. Older sign-ins migrate to the new system by themselves within 8 days.

Effect of changing and resetting your password​

ActionEffect on sessions
Change passwordAll other sessions end; the device you changed it on stays signed in
Reset passwordAll sessions end, then a notification email is sent. The next sign-in still asks for 2FA

Personal API tokens are not revoked by a password change. See API tokens.

"New device" email​

Owners with 2FA on receive an email when a sign-in comes from a new device (a platform setting). If it was not you: sign out all other devices, change your password, and revoke any API tokens you do not recognize.