Security

Use Security when you want to review where your Fetch Hive account is signed in. This page helps you inspect active sessions and revoke access from individual devices or every other device at once.

​

Overview

The security page shows a sessions table with device and location details, last-seen activity, and a Current session badge for the device you are using now. You can search the table, revoke one session, or revoke all other sessions while keeping the current one active. Revoked sessions stop working across protected Fetch Hive surfaces. Dashboard and JWT-backed API requests validate the session ID and session version before they continue. To keep normal requests fast, successful validations use a short positive cache. The default cache window is 5 minutes and can be changed with AUTH_SESSION_VALIDATION_CACHE_TTL_SECONDS, so revoked or suspended JWT-backed access can remain valid until the cached (sub, sid, sv) entry expires. Rotating the session version bypasses old cache entries.

​

How do I review active sessions?

Open Settings in the sidebar, then click Security. Review the sessions table to see where your account is currently signed in. Use the search field if you want to narrow the table to a specific device or session detail. Look for the Current session badge so you know which row represents the device you are using now.

​

How do I revoke one session?

Find the session you want to remove from the table. Click Revoke on that row. Confirm the action in the dialog to sign that session out. After a session is revoked, it can no longer use protected auth-service endpoints or continue refreshing access tokens. JWT-backed dashboard/API requests are blocked after the validation-cache window expires. Suspended accounts are blocked the same way.

​

How do I revoke all other sessions?

Use Revoke All Sessions from the page header when you want to sign out every session except the current one. Confirm the action in the dialog. This is the fastest option when you have signed in on multiple devices and no longer trust them. Your current session remains active so you can keep working. See also: Team members and Billing