How to disconnect from all devices

zoro1234 · 2024-11-14T09:57:05+00:00

My account is loged in at another windows pc app and is used by others. I changed my passwort but that does not disconnect the account from the other pc. Every time I log in on my pc there are new items being synchronized that were added by the other pc. How can I disconnect all apps logged in to my account?

Just try it yourself: Go to zotero.org, change your passwort, then add some item in zotero (a new folder, for example), log out from browser, then open your zotero windows app and it synchronizes although you did not tell the zotero windows app the new passwort!

fcheslack · 2024-11-14T12:48:47+00:00

You can de-authorize any app that currently has access from your security settings.

https://www.zotero.org/settings/security#applications

ErKann · 2024-11-14T13:07:27+00:00

Under "Browser Sessions" there are only accounts that are logged in right now. If an account is not in use on the other pc right now then one has to wait until it is used next time.

In general: How can it be that changing the passwort does not kick them out of an account? They do not know the new passwort, hence, they should not be able to have access to the account anymore. To me this is some kind of bug.

fcheslack · 2024-11-14T13:23:51+00:00

The sessions reflect all browser sessions that are still active. If a browser session is not shown there, someone would have to log in to your account again using your password.

Passwords are never stored by Zotero with a browser session or a Zotero application (though you may have saved your password to the browser which we have no control over). They log in once when you enter your password and maintain a token with access to operate on your account. These tokens are what is shown on the security page. If you remove access from those, they cannot get a new one without your password.

Note though that you just posted from 2 separate Zotero accounts, so you'd want to make sure you're actually looking at the security page when logged in to the intended account and changed the correct password.