← Auth / Security

Session Management

auth / security · wireframes · user-facing loading

Devices where the account is signed in, and ending sessions you no longer need.

Wireframe
active sessions
achilles.local/account/security/sessions /account/security/sessions · after sign-in
A Achilles
Member DS

Active sessions

Devices with an open session on your account. Spot one you don't recognise? End it.

Chrome · macOS This session 1
Moscow, Russia · 192.0.2.14 · active now 2
Safari · iPhone
Moscow, Russia · 2 h ago Revoke 3
Firefox · Windows
Saint Petersburg · 3 d ago Revoke
4
Up to 5 sessions active at once v2. 5
sign-in from a new device v2
achilles.local/account/security/sessions /account/security/sessions · after sign-in
A Achilles
Member DS
Sign-in from a new device: Firefox · Windows, Saint Petersburg — just now. Was this you? 6
Firefox · Windows New
Saint Petersburg · 198.51.100.7 · just now Revoke
Chrome · macOS This session
Moscow, Russia · active now
  1. 1 The current session can't be ended — instead of "Revoke" it carries a "This session" status chip.
  2. 2 Device and location are approximate (VPNs and proxies skew them) and are no proof of identity.
  3. 3 "Revoke" ends the session on that device; behind a confirmation (confirm-dialog), re-auth — v2. Mechanics — ending a session.
  4. 4 "End all other sessions" signs out on every device except the current one; also behind a confirmation.
  5. 5 The concurrent-session limit v2 — 5 by default, configurable in the Admin Panel. When exceeded, the oldest session ends automatically. Policy — Concurrent sessions.
  6. 6 The new-device sign-in alert v2 — a banner plus an email. "This wasn't me" leads to a password change.