See where you are signed in and end a session

A line names the ARMANOS app with the computer name, a browser with its system, or a server signed in with an API key. Below it are the system and the app version, the IP address, when the sign-in happened and when the device was last active.

The country stands next to the IP only when our network provider reports it. Otherwise the line shows the IP alone, and we do not guess a city.

Your own device is first and marked This device. A device seen for the first time is marked New device for seven days.

Each line except your own has End session. Below the list, End all other sessions closes every line but yours. Both ask for your password, and for the code from the authenticator app if two-step sign-in is on.

1. 1

   Open the Account screen

   Or your account page on the site.

2. 2

   Find the line under Where you are signed in

   Press End session, or End all other sessions below the list.

3. 3

   Enter your password

   And the code from the app, then press End session.

Right after End all other sessions and after a password change, the owner and the admins of a team see a review of the last 14 days: new people with who invited them and from which device and address, unaccepted invitations, role changes (what it was and what it is now), new API keys with whose key it is, its rights and when it was last used, and profiles opened to people in the team. In the app the review is on the Account screen under Where you are signed in, on the site it is on the account page.

Each line has a button: Remove from team, Revoke invitation, Revoke key or Close access. The review itself changes nothing: you decide.

A revoked key stops working right away. The review stays on the screen until you press Hide review.

It is there because a new password closes only the stolen sign-in. A person invited with that sign-in, and an API key they created with their own password, stay until you remove them here. So does an unaccepted invitation.

The review shows the team you are in now. If another of your teams also changed, the review names it in a separate line with how many changes of each kind it has. Switch to that team and check the people and invitations under Team and the keys under Team API keys on the site.

Managers, operators and members do not see the review. A server updated before this version does not give it, and the app and the site work as before.

The app there learns within a minute if profiles are open, and within five minutes if none are. It closes the open profiles without asking and shows You were signed out on this computer with the reason.

Profile data stays on that disk. The profiles open again only after someone signs in to the same account there, and the sync folder neither gets nor gives anything until then. After that sign-in, what waited in the profiles goes to the folder by itself.

The device seat of that computer is freed. A computer without a connection learns about the end only when it is back online. An earlier version of the app keeps open profiles running until someone closes them, but it can no longer save anything to your account.

Changing the password signs out every other device at once and revokes your API keys, and the device you changed it on stays signed in. In the app, Change password is under Change email on the Account screen.

Turning on two-step sign-in also signs out every other device, and profiles open there close. It does not revoke API keys: a key lives until you revoke it under API keys or change your password, as with large services. That is why a new key is issued only after you enter your password and the two-step code again, and the app on your other computers shows “An API key was created” in the bell.

The app on your other computers shows New sign-in to your account in the bell, with Show sessions. Once our mail service is on, each sign-in from a new device also sends an email to your address.

A browser in a private window from your usual address is not a new device. A new address together with a new browser is.

The team owner sees and ends the sessions of logins that belong to the team, and an administrator those of logins with a lower role, with Sessions next to such a login. A person with their own account manages their sessions alone.

Signing in to the app through the site does not ask for the password again. So end the line of the browser on that computer as well, or simply press End all other sessions.