Sessions, Security & Device Management
TeaNovel lets you view and manage all active sessions across your devices. This gives you a clear record of where your account is signed in and helps you respond quickly if you lose a device, use a shared computer, or notice activity you do not recognize.
Viewing active sessions
Go to Settings → Active Sessions to see devices where you're signed in. Each entry shows:
- Browser — The detected browser, such as Chrome or Safari
- Device — The detected operating system, such as Windows, macOS, Linux, iOS, or Android
- Signed-in time — When the session was created
Your current session is marked so you can distinguish it from sessions on other devices. The page does not show IP addresses or last-active times.
Revoking a session
If you see a session you don't recognize, or you want to sign out from a device remotely:
- Go to Settings → Active Sessions
- Find the session you want to end
- Click Revoke
That device is signed out and must sign in again to access your account.
Security recommendations
Review sessions regularly. Check your active sessions periodically, especially after using a shared computer, changing browsers, or traveling. If you see a device or browser you do not recognize, revoke that session and review your connected sign-in methods.
Protect your email account. Email sign-in uses a one-time code, so secure the inbox that receives your codes. You can also connect another OAuth provider as a backup sign-in method.
Keep a backup sign-in method. Connect another OAuth provider if you want an alternative way to sign in.
Sign out on shared devices. If you use TeaNovel on a public or shared computer, sign out when you are done. If you forget, revoke the session later from another device as soon as possible.
Treat unexpected activity as a real warning sign. If a session appears that you do not recognize, do not wait to see if it happens again. Revoke it and review your connected OAuth providers.
Session expiration
Sessions expire after seven days unless activity refreshes them. You may also need to sign in again after signing out, having a session revoked, or clearing browser cookies.
In practice, this means a session can end even if you did not explicitly press a sign-out button on that device. If you return after a long gap and need to log in again, that usually means the previous session is no longer valid.
What sessions track
The session list displays the detected browser and operating system, sign-in time, and whether a session is current. The server also stores session metadata used for authentication; see the Privacy Policy.
This information helps you recognize your devices and revoke sessions you no longer use.