Active sessions and devices

The list of active sessions shows all devices and browsers where you are currently logged in to gas. It serves two purposes: you can see whether someone else has got into your user account, and you can end a session on any device remotely, without having to physically go to that device.

When the list comes in handy

Most often in three situations:

  • A forgotten session on someone else's computer. You logged in at a client's office, at a reception desk or at a conference and forgot to sign out. Find the device in the list and log it out from here.
  • Suspected account misuse. The list contains a device or a place you do not recognise. In that case it is time to change your password and log out all devices.
  • A lost or stolen phone. Logging out prevents anyone from reaching the data of your customer accounts through the browser on the phone.

Logging out a device does not change your password. If you suspect that someone else knows your password, change it first in Settings → User profile → Password & access and then immediately use Log out from all devices. The application logs out you as well, and you log in again with the new password.

Where to find the list

  1. In the left menu click Settings.
  2. On the User profile card click I want to set up.
  3. In the menu on the left choose Active sessions. On a phone there is a drop-down list above the page content instead of the menu on the left.

What you see for each session

Every session has its own row with a computer, tablet or phone icon and with these details:

  • The name of the device and browser, for example "macOS 15.5, Chrome 137". It is made up of the operating system and the browser, not of the name you have set for the computer at home. The same computer therefore looks different in the list when you use Chrome on it and different when you use Safari.
  • Location, that is the city, region and country estimated from the internet address you logged in from.
  • IP address, that is the numerical identifier of your internet connection. It is listed under the location, without a label.
  • Last activity, that is when the device last communicated with gas. It is shown approximately ("5 minutes ago"), and the exact date and time appear when you hover over the value with the mouse.
  • Login, that is when someone logged in on this device.

The location and the IP address are recorded at the moment of login and do not change afterwards. When you take your laptop somewhere else, the record keeps the city where you logged in. The last activity value, on the other hand, is updated continuously, with an accuracy of roughly five minutes.

The location is always only an estimate based on the IP address, not the real position of the device. Mobile data, a company network or a connection through a VPN (a secured connection that routes traffic through another computer) commonly show a completely different city, possibly even a different country. Take the location as a supporting detail; the main clue is the device name and the time of the last activity.

Which session is your current one

The session you are looking from is always at the very top and is highlighted with a coloured border and background. Its card is also more detailed than the other rows: besides the last activity and the login time it has a separate field with the location. The other devices are listed below it in a single list, sorted from the most recently active one.

Logging out a single device

  1. Find the row of the device you want to log out in the list.
  2. Click Log out device on the right side of the row.
  3. A window opens asking "Do you really want to log out the device …?". Confirm it with the red Log out device button, or go back with Cancel.

After you confirm, the row disappears from the list. If you log out your current session in the same way, that is the highlighted card at the top, you log out yourself and gas switches you to the login screen.

Logging out from all devices

  1. Above the list on the right click the red Log out from all devices button.
  2. A window opens with the warning "You will be logged out from all devices including this one. Log in again to continue."
  3. Confirm with the red Log out from all devices button, or go back with Cancel.

This option really logs out all devices including the one you are running it on. Right after you confirm, gas switches you to the login screen and you will have to log in again. There is no "log out all except this one" variant; if you want to keep some device logged in, log the devices out one by one.

What happens to a logged-out device

Access is blocked immediately, but the application window on the other device does not know about it yet. It registers the change as soon as it reaches the server again, that is when moving to another page, refreshing data or when someone switches back to the window with gas. Usually it is a matter of seconds from the first click.

At that moment the following happens:

  • The application switches to the login screen. Depending on the situation, a red message also appears: "You have been logged out! Your session has expired. Please log in again."
  • Unfinished work is not saved. A form in progress that was not saved at that moment (a new goal, report settings in progress, an invitation for a colleague) disappears along with its content. That is why you should not log out a device a colleague is currently working on without agreeing it first.
  • Neither the data nor the settings of the customer account change. Logging out concerns only access from that device, nothing is deleted and linked accounts stay connected.
  • Anyone who knows your password or has access to the Google, Meta or Apple account you use to log in to gas can log in again. Logging out a device is therefore not enough when you suspect misuse; change your password too.

How long a record stays in the list

How long a device stays logged in is determined by the answer to the question Do you trust this browser?, which gas asks after every login. The Yes, I trust it option keeps the session for up to 30 days, the No thanks option for one day. The period is counted from the last activity, not from the login, so as long as you keep working in the application, the session keeps being extended. This is described in detail in the article Trusted device and session length.

When the period runs out, the session stops being valid and the login screen appears on that device the next time it is opened. However, the record does not disappear from the list by itself exactly at that moment; it disappears only when someone tries to use the application on that device again, or when you log it out from here. That is why you will occasionally see a device in the list that no longer has any valid session.

The list is loaded when the page is opened. You can request the current state at any time with the refresh button in the top right corner of the page.

Common problems

There is a device in the list that I do not recognise

The name is made up of the operating system and the browser, so one computer can appear in the list under several different names depending on the browser you opened it in. Compare the time of the last activity and of the login with the times when you were working with gas. If you are still not sure, log the device out: you will not break anything, it will just need to be logged in again.

The same device appears in the list several times

Every login creates a new record. If you log in in two browsers on one computer, in an incognito window, or if your session expired and you logged in again, another row is created each time. You can log out the rows you do not need one by one.

The device shows a different city from where I was

The location is estimated from the IP address of your connection. With mobile data, company networks and VPN connections the address is often reported from the place where the connection provider has its equipment, not from where you are actually looking. In addition, the value is recorded only at login and does not change afterwards, so travelling does not move anything in the list.

The device shows unknown instead of a city

The word unknown means that no city could be found for the IP address. This happens with company networks, VPNs and with addresses that are not in the location database. It is not an error and it has no effect on anything; use the device name and the time of the last activity for orientation.

I do not know which session is my current one

It is always the highlighted card at the very top, the one with a coloured border and a separate field with the location. All the other devices are listed below it.

I logged out from all devices and the application threw me out

That is how it should be, the Log out from all devices option logs out the device you run it on as well. Log in again the usual way, no data has been lost.

There is a device in the list that I have not logged in on for a long time

The session on it is most likely no longer valid, because it expired after one day, or after 30 days of inactivity. The record stays in the list until someone logs it out or until someone tries to open the application on that device again. For peace of mind you can log such a row out manually.

I changed my password, but the other devices are still logged in

Changing the password in Settings → User profile → Password & access does not cancel the other sessions. This is intentional, so that you do not have to log in everywhere again because of a password change. If you want to disconnect the other devices, use Log out from all devices after changing the password.

I reset my forgotten password and everything logged me out

Resetting a forgotten password through the link in the email is a different case from changing the password in the settings: for security reasons it ends all sessions of your user account. Log in again with the new password.

I log in through Google, Meta or Apple, are those sessions in the list too?

Yes. Every login is recorded in the list regardless of whether you used an email with a password or a Google, Meta or Apple account. Logging out a device works the same way in all cases.

It is still possible to click for a while on a logged-out device

Parts of the page that are already loaded stay visible for a while, because the browser shows what it downloaded earlier. As soon as the application needs anything from the server, it switches to the login screen. Nothing can be saved or sent on a logged-out device any more.

I lost my phone and I do not know which row it is

Use Log out from all devices. All devices including the lost phone will be logged out, and you then log in again on your computer. If the phone is in someone else's hands, change your password at the same time.

I logged out a device by mistake

No harm done. Log in again on that device the usual way; no data or settings are lost by logging out. Only the unsaved work someone had in progress there at that moment is gone.

I logged out someone else's device, but I am afraid they will log in again

Logging out does not undo the knowledge of the password. Change your password in Settings → User profile → Password & access and log out from all devices again. If you log in to gas through Google, Meta or Apple, secure that account too, because it allows logging in to gas even without knowing the password.

The list does not load or is empty

Try the refresh button in the top right corner of the page, or reload the page. If the problem persists, write to us through the contact form and tell us when you were opening the list and which browser you use.