Managing active devices
Stash keeps a list of every device that's currently signed in to your account. You can see what's signed in and where, and sign any device out remotely. This is your control panel for account security — useful if you lose a phone, leave a session open on a public computer, or notice activity you don't recognize.
Where to find active devices
Click your profile picture at the bottom of the sidebar.
Click Manage account.
Open the Security tab.
Scroll to Active devices.
What each device entry shows
For every signed-in session, you see:
Device type — Macintosh, iPhone, Windows, Android, etc.
Browser and version — e.g., Chrome 147, Safari 26
IP address and approximate location — e.g., Paris, FR
Last active — when this device last made a request
This device badge — marks the session you're currently using
Devices are listed with the most recently active first.
Signing out a device remotely
Find the device in the list.
Click the ⋯ menu next to it.
Choose Sign out this device.
The session ends immediately. Anyone using Stash on that device is kicked out — they'll need to sign in again to continue.
To sign out of your current device, use Sign out in the profile dropdown instead.
When to use this
You lost a phone or laptop
Sign out the lost device immediately. Whoever has the device can no longer access your Stash account on it. Then remove any passkey saved on it — see Using passkeys with Stash.
You used Stash on a public or shared computer and forgot to sign out
Sign out the session from a different device. The shared computer's session ends instantly.
You see a device or location you don't recognize
Sign it out, then lock the account down further:
Add a passkey on a device you control — see Using passkeys with Stash
Review the email addresses on your account in case anything looks off
Get in touch via chat if you suspect a real account compromise
What gets logged in active devices?
Only signed-in browser or app sessions. The list doesn't include API access (none currently exists for end users) or background syncs. The IP address and location are approximate — based on the IP at the time of sign-in or last request.
Related articles