Connected accounts and active sessions

After this page, you know which external providers are connected to your account and which devices are currently signed in — and you can end either.

Steps#

Check connected accounts#

1. Open Settings › My account › Security and go to the Connected accounts card (“External providers you can sign in with.”).
2. The table has four columns: Provider, Reported address, Connected since, and Last used. If it says Never there, the path has not been used since the connection was made.
3. A sign-in through the company account appears as the provider Company sign-in.

The Connected applications card is on the same page, but it covers something else. A connected account is a way for you to get in, while a connected application is an authorization you have granted. See Allow and revoke connected applications.

You do not create a connection yourself, and there is deliberately no button for it. The portal creates it as soon as you sign in once with Continue with Google or Continue with Apple on the sign-in page and the provider reports the same email address that is confirmed there. Without a connection, the card says No connected accounts. Every new connection immediately triggers a security email. If it was not you, change your password right away.

Disconnect a connected account#

1. Click Disconnect in the row.
2. Confirm the Disconnect? prompt. It names the consequence and the provider, for example: “Signing in through Google will no longer be available to you.”

If you would be left with no way in, the button is disabled: “This connection is currently your only way to sign in. Set a password first, then it can be disconnected.”

End sessions#

1. Go to the Active sessions card (“Devices and browsers currently signed in.”).
2. Each row names the browser and operating system, plus Last active with the time. Your own device shows the This session badge. If there are many, a button with the count shows the rest (such as Show all 6 sessions), and Show fewer collapses it again.
3. To end a single session, click Sign out. If it is the one you are using, you are signed out here afterwards.
4. To end all sessions at once, click Sign out everywhere else. That is the button’s label, but the Log out everywhere? prompt says what really happens: “All sessions on every device will be ended. You will be logged out here too.” Confirm with Log out everywhere.

Options#

If you use Apple’s option to hide your own address, the provider reports a relay address. You can recognize it in the Reported address column by its suffix @privaterelay.appleid.com. Signing in works with it, but emails do not reach you through it. The portal says so in the row: “Hidden relay address — we cannot deliver email to it. Please add a reachable address in your profile.”

Your sign-in is not kept in your browser’s storage. That is why even malicious code on the page cannot get at it.

If your organization enforces sign-in through the company account, Google and Apple are not available for addresses in the confirmed domains. Existing sessions do not end on their own. That is what Log out everywhere is for.

Check the result#

• After disconnecting, “Connection removed” appears, and the row disappears from the table.
• After ending a session, “Session ended” appears, and the row is gone.
• After Log out everywhere, you land on the sign-in page. Other open windows of the same address are signed out as well.

If something goes wrong#

Related#

• Set up two-factor sign-in
• Sign in: password, sign-in link, company account
• Manage members: change role, block, remove