How to Manage Trusted Devices and Active Sessions
Review all devices signed into your account, trust familiar devices, and revoke access to unrecognized sessions.
The session list is the cheapest security check on the account: it shows every device currently holding a signed-in session, and revoking one takes a tap. Read it as a habit rather than after something goes wrong — an unfamiliar entry is the earliest signal you will get that a sign-in did not come from you.
Before you start
- Access to a signed-in device. Revoking sessions is done from a session that stays.
- A rough memory of which devices you sign in from, so an unfamiliar one stands out.
View Active Sessions
Navigate to Profile > Security > Active Sessions. This screen lists all devices currently signed into your Midas account, showing the device type, operating system, IP address, location, and last activity time.
Identify Your Devices
Review each session to confirm it belongs to you. Compare device names, locations, and IP addresses with your known devices. Any session you do not recognize could indicate unauthorized access.
Trust Familiar Devices
Tap 'Trust' on devices you use regularly. Trusted devices may skip certain security checks for convenience while maintaining full security. Only trust devices you physically control and that are secured with strong device-level authentication.
Revoke Suspicious Sessions
If you see a session you do not recognize, tap 'Revoke' to immediately terminate that session. The device will be signed out and will need to re-authenticate. If you suspect compromise, use 'Revoke All' to sign out all devices except your current one, then change your 2FA settings.
Review Regularly
Make it a habit to check your active sessions periodically, especially after traveling or using shared networks. Keeping a clean session list is an important part of account security hygiene.
If something goes wrong
- A device you own looks unfamiliar in the list.
- Entries are labelled by browser and approximate location, so a VPN or a mobile network can make your own phone look foreign. Match it against the last-active time before revoking.
- You revoked the wrong session.
- Nothing is lost — sign in again on that device. Revoking ends a session; it does not touch the account or its keys.
- Sessions keep reappearing after you revoke them.
- That points at credentials rather than a stale session. Change the email on the account if you suspect the mailbox, rotate 2FA, and register a passkey so sign-in no longer depends on the inbox.
Frequently asked questions
- How often should I check the list?
- Monthly is plenty for most people, plus any time you get a sign-in notification you did not expect.
- Does revoking a session log me out everywhere?
- Only the session you revoke, unless you choose the option to end all others — which is the right move if you believe the account was reached by somebody else.
- What does marking a device as trusted change?
- It reduces repeat prompts on a device you use constantly. Do not mark a shared or public computer as trusted.