Every time you sign in from a new browser or computer, you create a session. Over time those sessions add up: an old laptop, a borrowed computer at a hotel, your phone, the desktop at the office.

If you don't fully trust any of those devices anymore (a shared machine, a lost laptop, a stolen phone) you can kill every active session in one click. 

A few things to know before you do this:

• Signing out everywhere also signs you out of the device you're using right now. You'll be sent back to the login page and asked to sign in again with your email and password (plus 2FA if it's on).
• This does not change your password. If you think the cause was a stolen password, change it first (see changing your password) and then sign out everywhere.
• Anything that uses an API key keeps working. API keys are separate from sessions. To revoke an API key, see Rotating and Revoking an API Key.

1. In the sidebar, find your profile button at the bottom: it shows your avatar, name, and email. Click on that.

2. Click Settings. The Account Settings page opens.

3. Along the top of the page, click the Security tab.

You'll see four cards stacked top to bottom: Change Password, Two-Factor Authentication, Linked Accounts, Passkeys, and Devices. The one you want is at the bottom.

Scroll to the Devices card. Each currently signed-in session is shown as its own row inside the card. For each row you'll see:

• A device label: usually the browser and operating system the session was started from, e.g. "Chrome on macOS" or "Safari on iPhone".
• The IP address the device last connected from.
• The time the session was last seen (for example "2 minutes ago" or "3 days ago").
• A small Current tag on the row that represents the browser you're using right now.

Take a moment to skim the list. If you spot anything you don't recognize (a city you've never been in, a device that isn't yours, a session from years ago) that's a good reason to keep going.

1. In the Devices card, find the Sign out all devices button. It's at the bottom of the card, below the list of rows.
2. Click Sign out all devices.

Every session (including the one you're sitting in front of) is immediately ended. The portal redirects you to the login page.

1. Sign back in with your email and password. If you have 2FA on, you'll also be asked for a six-digit code.
2. Once you're signed in, head back to Account > Security > Devices. Only this fresh session should be listed.
3. If anything you didn't expect appears in the list again later, your password has likely been compromised. Change it via changing your password and then sign out everywhere again.