Active Sessions

Monitor and manage devices logged into your account.

What are Sessions?

A session represents an active login to Zettabit. When you log in, a session is created that:

• Identifies your device
• Tracks your login time
• Maintains your authenticated state
• Records your IP address

Viewing Your Sessions

1. Go to Settings > Security
2. Find Active Sessions section

Session Information

Current Session

Your current session is marked with a badge:

• “Current” or “This device”
• Cannot be terminated (you’d log yourself out)

Terminating Sessions

To log out a specific device:

1. Find the session in the list
2. Click Terminate or the X icon
3. Confirm the action

The session is immediately invalidated and the device is logged out.

Terminate All Sessions

To log out all devices except your current one:

1. Click Terminate All Other Sessions
2. Confirm the action

Use this if:

• You suspect unauthorized access
• You’ve lost a device
• You’re on a shared computer
• You’ve changed your password

Session Security

Automatic Expiry

Sessions expire automatically after:

• 30 days of inactivity (default)
• Configurable by administrator

Session Refresh

Active sessions are refreshed when you use Zettabit:

• Every action extends the session
• Idle sessions will eventually expire

Secure Session Handling

Zettabit protects your sessions with:

• Encrypted session tokens
• Secure cookie settings
• IP validation (optional)
• Browser fingerprinting

Recognizing Your Sessions

Each session shows device information:

Browser Examples

• Chrome on Windows
• Safari on macOS
• Firefox on Linux
• Mobile Safari on iOS

Location

Location is estimated from IP address:

• City and country
• May not be exact
• VPN users may see VPN server location

Suspicious Sessions

Watch for sessions you don’t recognize:

Warning Signs

• Unknown location
• Unknown device
• Old login you forgot about
• Login time when you weren’t working

If You See Suspicious Activity

1. Terminate the session immediately
2. Change your password
3. Enable 2FA if not already enabled
4. Review audit logs for unauthorized actions
5. Contact administrator if concerned

Session Best Practices

1. Log out from shared computers - Don’t stay logged in
2. Review sessions regularly - Check for unauthorized access
3. Use unique browsers - Helps identify sessions
4. Enable 2FA - Prevents unauthorized logins
5. Don’t share credentials - Each user should have their own account

Troubleshooting

Logged out unexpectedly

Possible causes:

• Session expired
• Admin terminated your session
• System maintenance
• Browser cleared cookies

Solution: Log in again.

Multiple sessions from same device

This can happen if you:

• Use different browsers
• Use incognito/private mode
• Clear cookies and log in again

Session location is wrong

IP-based location isn’t always accurate:

• VPNs show VPN server location
• Mobile data may show carrier location
• ISPs may route through different cities

This doesn’t indicate a problem unless combined with other suspicious signs.

Admin: Managing User Sessions

Administrators can view and manage all user sessions:

View All Sessions

In the admin panel:

1. Go to Users
2. Select a user
3. View their active sessions

Terminate User Sessions

Force log out a user:

1. Find their sessions
2. Click Terminate
3. Or Terminate All for that user

Use this if:

• User account is compromised
• User left the organization
• Suspicious activity detected

Session Policies

Configure session policies:

• Maximum session duration
• Idle timeout
• IP restriction
• Concurrent session limits