Why is there no list of my signed-in devices?

Most services show you a list: device, location, last active, IP address. We don’t, and it’s a choice rather than an oversight.

Why not

To show you that list, we’d have to build it — record where you sign in from, on what, and when. That’s a new file about your movements and habits, sitting in the same system you came to us to reduce your exposure, powering a screen most people look at once.

We’d then have to protect it, and it would be in any breach we ever had.

What we do instead

Sign out other devices, on the account page. One action, ends every session except the one you’re using. It requires your password and a second factor, so an unlocked laptop can’t trigger it.

That covers the case that actually matters — a lost or stolen device — without us keeping a travel diary to get there.

How it works

Sessions are signed tokens rather than database rows. Signing out other devices advances a counter on your account, and every token issued before that moment stops being accepted immediately. Changing your password does the same thing automatically, since you usually change a password because something went wrong.