Sessions & devices¶
See every device signed in to your Letro account, check which ones are verified, and sign out any you don't recognize.
Security note: A session you don't recognize could be someone else with access to your account. If you spot one, sign it out right away and change your password.
Each time you sign in to Letro — on a phone, a laptop, or the web — it creates a session (sometimes called a device). Reviewing this list is one of the fastest ways to catch unauthorized access.
- Verified sessions have proven they belong to you. They can read your encrypted messages, and other people see a green shield next to them.
- Unverified sessions haven't been confirmed yet. Verify the ones that are really yours, and sign out any that aren't.
On Web & Desktop¶
- Select your avatar in the top-left, then choose All settings.
- Open Sessions (also labeled Devices).
- Your current session is shown at the top. Below it, Other sessions lists every device signed in, each marked Verified or Unverified.
- Select a session to see its details, when it was last active, and its options.
- To rename it, choose Rename (or the pencil icon), type a name you'll recognize like "Work laptop", and save.
- To remove one, choose Sign out of this session. Enter your password if prompted.
On iOS¶
- Tap your avatar, then All settings.
- Tap Sessions.
- Review the list. Your current session is at the top; others show Verified or Unverified.
- Tap a session to open it.
- Tap Rename to give it a recognizable name, then save.
- Tap Sign out to remove a session you don't use or don't recognize.
On Android¶
- Tap your avatar, then All settings.
- Tap Sessions.
- Review the list. Your current session is at the top; others show Verified or Unverified.
- Tap a session to open it.
- Tap Rename to give it a recognizable name, then save.
- Tap Sign out to remove a session you don't use or don't recognize.
Good to know¶
- Do a quick review now and then. Old phones, browsers you signed in on once, and devices you no longer own all pile up here. Sign out anything you're done with.
- Signing out a session ends its access. That device can no longer read new messages or act as you until someone signs in on it again.
- You can't sign out your current session from this screen — use the normal sign-out instead. Signing out your last verified session can affect access to encrypted history, so keep at least one device verified or your recovery key safe.
- See an unverified session you don't recognize? Treat it as a warning sign. Sign it out, then change your password. Consider that a full reset of your identity may be needed if you think your account was reached.
- Verifying a session is a separate step from renaming it. A recognizable name is just for you; verification is what proves the device is trusted for encryption.
Related: