Signed-in devices and offboarding
Every browser and phone someone signs in from is a device. You can see them all and sign any of them out.
Your own devices
Settings → Signed-in devices lists where you're signed in — browser and system, address, when it was last active — with this device marked.
- Sign out one device (for example a lost phone).
- Sign out all other devices keeps only the one you're using.
Changing your password also signs you out everywhere else. Every sign-in lasts at most 30 days; after that you sign in again.
When someone leaves (admins)
Settings → Users → Manage next to the person:
- Sign out everywhere — ends all their sign-ins and closes any terminal or remote desktop they have open, within seconds.
- Disable account — they can't sign in any more (password, two-factor or single sign-on), but the account and its history stay. Click Enable account to let them back in later.
- Optional: move their servers you still need into a shared folder.
- Optional: delete the account once you no longer need its history.
If you use single sign-on, also remove them at your identity provider. Disabling them in FusionTerm makes it immediate.
Tip: remove them from shared vault folders and change any passwords they may have seen (people with View access could read them).