Security
Security in the Settings area (Account) — route /settings/security.
Security lives in the Settings area of the dashboard, under Account.
At a glance#
| Dashboard route | /settings/security |
| Area | Settings (settings) |
| Group | Account |
| Platforms | Available for every app platform. |
What it does#
Security covers your own account's protection: changing your password, reviewing your active sessions across devices with the option to sign them out, and a history of login events.
The two lists are the useful part. Active sessions tell you where you are currently signed in; the login history tells you where sign-ins have come from, which is how you notice one you did not make.
When to use it#
After any credential concern — a shared password, a lost device, a phishing email you are not certain about. Also periodically: reviewing sessions takes fifteen seconds and is the only way to find a session on a device you no longer have.
Workflow#
Read login history for anything unfamiliar
An unrecognised sign-in is the single clearest signal that your account is compromised, and it appears nowhere else.
Sign out sessions you do not recognise — or any you no longer need
An old session on a device you have replaced is a live credential.
Change your password if anything looks wrong
Do this before investigating further. Investigation can wait; an open session cannot.
Check your access tokens too
Access tokens authenticate as you and are not affected by signing sessions out. A compromised account may have gained a token that survives your password change.
Permissions and prerequisites#
Your own account only. This page cannot see or manage other members — for who has access to the workspace, see Team & roles.
Limits and edge cases#
Per account, not per workspace. These are your credentials, wherever you use them.
Login history shows what was recorded, and location and device information is inferred from the request rather than certain.
Signing out your current session logs you out.
Troubleshooting#
A session I do not recognise. Sign it out, change your password, revoke your tokens. In that order, and do not wait to be sure.
Logged out unexpectedly. Someone signed out sessions, your password changed, or the session expired normally.
A login from an unfamiliar location. Location is approximate and derived from network address — a VPN or a mobile network can produce a surprising one. Compare the device and timing before concluding.
Where the data comes from#
Served by
Auth
Admin