Sessions and devices
On the «Sessions» screen you see every sign-in under your profile and can disconnect any device with a single tap. This is your main tool when you have any doubt that you're the only one with access.
What the list shows
Each row is a separate sign-in. The «Where» column shows the device, the app and the IP address; the «Activity» column shows the last activity and the sign-in time. The location by IP isn't shown here — it's in the activity history.
The current session carries a «Current» mark; the others are «Active» or «Ended». A session started by a sign-in from a new device is highlighted and marked «new device» — so it's easier to spot what appeared recently.
How to end a session
The «End» button revokes the tokens issued to that session: the system double-checks with «End session?», the device loses access immediately and will be asked to sign in again on its next request.
The «End all others» button leaves only the current session active — the one you clicked it from. Use it when there's an unfamiliar device in the list and you need to disconnect everything else at once.
Ending sessions is an important operation. Sometimes the system asks you to confirm it with a one-time code or a passkey: that's how it checks that it's really you disconnecting the device.
Warning
If you spot a device or app in the list that you didn't have, end that session and change your password right away. Then turn on two-factor protection if it isn't on yet.
Trusted devices
If you ticked «Trust this device» at sign-in, the device ends up in the «Trusted devices» block (it appears when there are such devices). A sign-in from a trusted device won't ask again for the one-time new-device code — you get through faster.
The «Forget» button removes trust — the system double-checks with «Forget this device?». Next time, this device will be asked for the code again. Mark only your own personal devices as trusted. It's best not to trust someone else's or a shared computer.
Auto sign-out and the session limit
On the «Security» screen there are two settings that govern sessions:
- «Auto sign-out when idle» — how many minutes without activity before the account ends the session itself. The default is 30 minutes; you can choose stricter: 15, 10 or 5.
- «Simultaneous sessions» — how many sessions can be active at once. The default is 5; you can choose 3, 2 or 1. When a sign-in exceeds the limit, the session started earliest is ended.
If you work from shared or office computers, lower both values: a forgotten tab closes itself, and an extra sign-in pushes out an old one.
What's next
- Want to see not just active sessions but a history of profile actions — take a look at the activity history.
- To have every new sign-in require confirmation, set up two-factor protection.
If something in the list looks suspicious and you're not sure what to do, write to c-support@invoicebox.ru or call +7 (812) 448-08-01 (9:00–21:00 Moscow time).