Sessions and devices

Every phone and browser signed in to your account is a session. You can see all of them and end any of them from a distance.

See your sessions

• App: Settings > Active sessions, under Web & devices.
• Website: Account > Sessions.

Each session shows whether it is the Android app or the website, the device or browser name and when it was last active. The one you are using is marked This device.

Sign out a session

Choose a session and confirm to sign it out. To end everything except the device in your hand, choose Sign out all other sessions. Signed-out devices lose access within about 30 seconds and have to sign in again.

Automatic sign-outs

• Changing or resetting your password signs out every other session.
• Deleting your account ends all sessions.
• A session expires after 30 days at the latest.

Account activity

Settings > Account activity in the app and Account > Activity on the website list security events from the last 90 days: sign-ins, failed sign-in attempts, web sign-in codes, ended sessions, password and two-step changes, data downloads and more. If you see something you don't recognise, sign that session out, change your password and turn on two-step verification.

New sign-in alerts

When your account is used on a device it has not seen in 90 days, you get a new sign-in notification. This alert cannot be switched off. See Notification center.