Active Sessions and "Sign Out Everywhere"
It lists every device signed in to your account; you can terminate them one by one or all at once (except this device).
Where to find: Merchant panel → Profile → Security tab → Active sessions card Who it's for: Anyone who wants to see which devices are signed in to their account and cut off a suspicious login immediately In short: It lists every device signed in to your account; you can terminate them one by one or all at once (except this device).
What is it for?
You forgot to sign out on a shared computer. Or you suspect your password has fallen into someone else's hands. Changing the password alone is not enough — sessions that are already open can stay open.
The Active sessions card closes this gap:
- You see where and when your account was signed in from,
- You immediately terminate the session of a device you do not recognise,
- In a suspicious situation you close all other sessions in one move.
Where do I find it?
- In the merchant panel, go to Profile from your profile menu at the top right.
- Switch to the Security tab.
- You will see the Active sessions card on the page: "Devices currently signed in to your account".
The card's header shows how many sessions are open in a badge ("N sessions").
What do you see in the list?
Every row is one session:
| Information | Description |
|---|---|
| Device / browser | E.g. "Chrome · Windows". If it cannot be detected it says Unknown device. |
| This device badge | The session you are currently using; it stays at the top of the list. |
| Signed in | When this device first signed in. |
| Last activity | When this session was last used ("just now", etc.). |
| Location / IP | Approximate location and IP information. |
Note the line under the card: "Location and IP data are approximate; the last part of the IP address is hidden." So the location is a city-level estimate — a device on a VPN or a mobile network may appear in a different city. Do not treat it alone as proof that "someone accessed my account"; weigh it together with the sign-in time and the device.
Terminating one session
- Press the Sign out button on the row you want to close.
- A confirmation appears: "The session on … will be terminated. That device will need to sign in again."
- Confirm. The "Session terminated" notification appears and the row drops off the list.
Termination takes effect immediately. On its very next request that device loses access to the panel and has to sign in again.
Signing out all other sessions
If you think your password may have leaked, this is the fastest fix.
- Press Sign out all other sessions on the card.
- The confirmation window states how many sessions will be closed: "N sessions other than this device will be terminated. Those devices will need to sign in again."
- Choose Sign out all.
Your own session is not closed — the device you are using stays signed in, so your work is not interrupted.
The right order for a suspicious login:
- First change your password,
- Then sign out all other sessions,
- Then turn on two-factor authentication (see Two-Factor Authentication).
The order matters: if you do not change the password first, the attacker can simply sign in again with the old one.
Frequently asked questions
There is a device I do not recognise. What should I do? Terminate that session first, then change your password and turn on two-factor authentication.
The same device appears twice. If you signed in from different browsers or a private window, each is a separate session. Clearing browser data also starts a new session.
I terminated a session but the device still appears. Refresh the page. Termination is immediate; the list on screen updates when it reloads.
Do sessions expire on their own? Yes, sessions that go unused for a long time expire and drop off the list.
Can I close my staff's sessions here? No. This card only shows the sessions of your own account. To cut off a staff member's access, remove their permissions under Store Settings → Team Members.
Can I manage the devices I chose "remember for 30 days" on? The trusted device list is a separate feature; this card shows active sessions only.
Was this page helpful?
E-mail Verification
Before you can use your account for the first time, you must enter the 6-digit code sent to your e-mail address to confirm that the address really…
Changing Your Email Address
You confirm your identity with your current password, then enter the 6-digit code sent to the new address; nothing changes until that code is verified.