Sessions and sign-in history
Settings → the Security tab has two blocks that show what's happening with your account.
Active sessions
The list of devices currently signed in. Your current device is marked separately.
- End next to a row — sign out one device.
- End all — sign out everywhere except the current device.
Sessions end automatically after 30 days of inactivity. An ended session loses access immediately — even if the panel is still open on that device.
Saw an unfamiliar device — end all sessions and change the password right away, otherwise the sign-in can be repeated. Enable two-factor authentication while you're at it.
Sign-in history
A table of sign-ins: date and time, IP address, device and country. It shows where the account was accessed from.
| Column | Meaning |
|---|---|
| Date & time | When the sign-in happened |
| IP address | The address the sign-in came from |
| Device | Browser and operating system |
| Country | Determined from the IP address |
The country and city are determined from the IP approximately. Over a VPN or mobile internet an entry may show a different region — that's normal and not by itself a sign of a break-in.
What counts as alarming
- A sign-in from a country you haven't been to, without a VPN.
- A sign-in at a time you definitely didn't sign in.
- A device you don't have.
In that case: end all sessions → change the password → enable 2FA → contact support.