My PC was recently infected with malware and there was suspicious activity on a lot of my online accounts and thus I’m changing all of my passwords now and logging out all sessions for all of my accounts. I don’t see a way to clear all sessions in Home Assistant though. By the way, simply changing the password doesn’t automatically do that.
Go to your user profile (either by clicking your icon at the bottom of the home assistant sidebar, or by visiting the My Home Assistant link below). Then click Security at the top of the page.
From there you can clear all the refresh tokens, which is how Home Assistant stays logged in - it will log out all signed-in clients.
(Scroll to the bottom of the Refresh tokens section to find the ‘delete all tokens’ option)
2 Likes
Thanks for the info.
Is there anything else I should do to enhance my safety, specifically in regards to HA? I reset my routers and deleted all of my browsers’ cookies already. I know there’s 2FA, but I don’t really want to use that.
How do you access you HA from outside your network?
I opened port 8123 on my router and it connects via duckdns via https and TCP.