On September 3, 2026, Dolphin {anty} added a list of active account sessions. Each session shows the device and the time of its last activity, and any session can be revoked with one click. Access from that device will be closed, while the other sessions will remain active. Previously, signing out of an account on one computer required changing the password or ending all sessions at once.
Teams have access controls: each member manages their own sessions, while the administrator manages the sessions of team members. Some sign-outs require confirmation via 2FA or, if two-factor authentication is not configured, via email. The same release also removed duplicates: one device could previously appear multiple times in the list.
Two other login-related fixes were released shortly beforehand. On August 21, persistent sign-outs were fixed: inactivity or a minimized app could invalidate the authorization, but the token is now refreshed in the background. On August 13, the “Confirm” button became disabled after the first click when entering a 2FA code: repeated requests could otherwise result in the user being locked out by 2FA.
What to do: Open the session list and end any sessions you do not recognize. If 2FA is not enabled yet, turn it on.
