# Connected accounts and active sessions

After this page, you know which external providers are connected to your account and which devices are currently signed in — and you can end either.

> **Type:** guide
> **For:** every person with an account in the portal
> **Prerequisite:** no particular role, since both cards concern only your own account
> **Where in the portal:** **Settings › My account › Security**, cards **Connected accounts** and **Active sessions**

## Steps

### Check connected accounts

1. Open **Settings › My account › Security** and go to the **Connected accounts** card (“External providers you can sign in with.”).
2. The table has four columns: **Provider**, **Reported address**, **Connected since**, and **Last used**. If it says **Never** there, the path has not been used since the connection was made.
3. A sign-in through the company account appears as the provider **Company sign-in**.

The **Connected applications** card is on the same page, but it covers something else. A connected account is a way *for you to get in*, while a connected application is an authorization *you have granted*. See [Allow and revoke connected applications](/docs/organization/connected-applications).

You do not create a connection yourself, and there is deliberately no button for it. The portal creates it as soon as you sign in once with **Continue with Google** or **Continue with Apple** on the sign-in page and the provider reports the same email address that is confirmed there. Without a connection, the card says **No connected accounts.** Every new connection immediately triggers a security email. If it was not you, change your password right away.

### Disconnect a connected account

1. Click **Disconnect** in the row.
2. Confirm the **Disconnect?** prompt. It names the consequence and the provider, for example: “Signing in through Google will no longer be available to you.”

If you would be left with no way in, the button is disabled: “This connection is currently your only way to sign in. Set a password first, then it can be disconnected.”

### End sessions

1. Go to the **Active sessions** card (“Devices and browsers currently signed in.”).
2. Each row names the browser and operating system, plus **Last active** with the time. Your own device shows the **This session** badge. If there are many, a button with the count shows the rest (such as **Show all 6 sessions**), and **Show fewer** collapses it again.
3. To end a single session, click **Sign out**. If it is the one you are using, you are signed out here afterwards.
4. To end all sessions at once, click **Sign out everywhere else**. That is the button’s label, but the **Log out everywhere?** prompt says what really happens: “All sessions on every device will be ended. You will be logged out here too.” Confirm with **Log out everywhere**.

## Options

If you use Apple’s option to hide your own address, the provider reports a relay address. You can recognize it in the **Reported address** column by its suffix `@privaterelay.appleid.com`. Signing in works with it, but emails do not reach you through it. The portal says so in the row: “Hidden relay address — we cannot deliver email to it. Please add a reachable address in your profile.”

Your sign-in is not kept in your browser’s storage. That is why even malicious code on the page cannot get at it.

If your organization enforces sign-in through the company account, Google and Apple are not available for addresses in the confirmed domains. Existing sessions do not end on their own. That is what **Log out everywhere** is for.

## Check the result

- After disconnecting, “Connection removed” appears, and the row disappears from the table.
- After ending a session, “Session ended” appears, and the row is gone.
- After **Log out everywhere**, you land on the sign-in page. Other open windows of the same address are signed out as well.

## If something goes wrong

| Symptom | Meaning | Solution |
|---|---|---|
| **Disconnect** is disabled | The connection is your last way to sign in. | First set a password of your own, then disconnect again. |
| “Disconnecting failed” | The change did not arrive. | Reload the page and try again. |
| Signing in does not connect to the existing account | The provider reports a different or an unconfirmed address. | Confirm the same address with the provider as the one in the portal. |
| You are suddenly signed out everywhere | The platform detected misuse of your sign-in and ended the session instead of renewing it. | Sign in again, change your password, and set up the second factor. |
| An unfamiliar session cannot be ended | This card shows only your own sessions. | Suspend the affected account under **Team** — that ends its sessions. |
| After **Sign out everywhere else**, you yourself are signed out | Despite the label, your own session ends as well. The prompt says so. | Sign in again. If you only want to get rid of an unfamiliar device, end that device’s session from its own row with **Sign out**. |

## Related

- [Set up two-factor sign-in](/docs/organization/set-up-two-factor)
- [Sign in: password, sign-in link, company account](/docs/getting-started/sign-in)
- [Manage members: change role, block, remove](/docs/organization/manage-members)