Skip to main content

How do I protect sign-in and active sessions?

A practical, plain-language guide to the shortest route, the right screen, and what to know before continuing.

From guide to action

Open Security

This opens the relevant work screen. You may be asked to sign in; no change is saved automatically.

Security and sign-in

The Security screen shows the controls and sessions connected to your own account. Use it after a password or device change, when a device is lost, or whenever a sign-in looks unfamiliar.

First step: open Security (/admin/security), review the active sessions, and revoke any session you do not recognise. Then update the available sign-in protection and confirm that your recovery details are current.

When the list is empty, there is no additional session currently shown; it does not replace checking the identity provider. Revoking a session should block that session on its next request, while removing a teammate’s business access is handled separately in My team. Never share a session cookie, one-time code, recovery link, or personal connection token with another person.

You can simply ask Up

Up answers using this guide, suggests the next step, and leads to the relevant screen.