Active sessions and login history
Reading your active sessions list, revoking ones you don't recognize, and what to do when you get a new-device sign-in email.
On this page
OrganizeOS tracks every successful sign-in to your account so you can see what's connected and react quickly if something looks wrong. Open Settings, click the Security tab, and scroll to "Active sessions" and "Recent sign-ins."
Active sessions
The Active Sessions section lists every device currently signed in to your account. Each entry shows the device (parsed from the user agent, like "Mac" or "iPhone"), the browser, the IP address, and when that session was last active. Your current device is marked with a This device badge.
Click the Sign out icon on any row to invalidate that session. The affected device will be signed out on its next API call (typically within seconds). If you sign out the current device, you'll be redirected to the login page right away.
There is no limit on the number of concurrent sessions you can have. OrganizeOS expects you to be signed in on multiple devices simultaneously (a laptop and a phone, work and home), and listing them all is observability, not enforcement.
Recent sign-ins
The Recent Sign-Ins section is your account's audit log. It shows the last 25 successful sign-ins, newest first. Each entry includes the device, browser, IP address, when it happened, and how it happened: password, magic link, or single sign-on.
Sign-ins from devices the platform has never seen before for your account are flagged with a New device badge. The badge is based on a fingerprint that combines the device type, browser, and a coarse IP location. It's deliberately forgiving (you won't get flagged every time your phone hops between cell towers) but specific enough that signing in from a different country or a different machine will trigger it.
New-device emails
Any time a new-device sign-in happens, OrganizeOS sends an email to your account address right away. The email tells you when it happened, what device, what IP, and includes a link to your Security tab. If it was you, you can ignore the email. If it wasn't, you should do three things in this order:
- Click through to Active sessions and sign out the unfamiliar session.
- Change your password.
- If you don't already have it, enable two-factor authentication.
The first step closes the door immediately. The second prevents the attacker from getting back in with the same password. The third makes a password-only attack impossible going forward.
If you sign in from a new device often (you switch browsers, or you use a privacy browser that fingerprints differently every session), you'll get more new-device emails than feels useful. That's a fair tradeoff: false positives are easy to ignore; missed real alerts are not.
What gets logged and what doesn't
OrganizeOS logs successful sign-ins. Failed sign-in attempts are not currently surfaced in your account-level log. We rely on rate-limiting and the platform's brute-force protection to handle attack volume, not on you watching for repeated failures.
Login history is available for sign-ins going forward.
Why this matters
Most account compromises are quiet: the attacker signs in, looks around, and you find out months later when something visibly breaks. The active-sessions list plus new-device emails compress that timeline from months to minutes. You get a real-time signal the moment something is off, and a one-click action to shut it down.