Session Management

Zenovay uses secure session management to keep you logged in while protecting your account. This guide explains how sessions work and how to manage them.

Understanding Sessions

A session is created each time you log in. Sessions:

Keep you logged in without re-entering credentials
Are stored as encrypted cookies in your browser
Are independent per device and browser
Stay active until you sign out or the session is revoked

Sessions are long-lived, so you usually stay signed in across visits without having to log in again every time.

When a Session Ends

Your session stays active until one of the following happens:

You sign out manually
You revoke the session from the Active sessions list (see below)
Your password is changed, which ends every other session
Your account is suspended

If a session is revoked from another device, you are returned to the login page the next time that device tries to reach Zenovay.

Viewing and Revoking Active Sessions

You can see every device that's currently signed in to your account and sign any of them out remotely.

Open the account menu (your avatar) and go to Settings → Account → Security & access, or visit app.zenovay.com/settings/account/security directly
Under Active sessions, you'll see your current device plus any other signed-in sessions, with location and last-active time
Select any session to view its details, then sign it out
To sign out every other device at once, use Revoke all other sessions

Spot something unfamiliar?

If a session you don't recognize appears in the list, revoke it and change your password. See Security best practices for more.

Signing Out

Sign Out from the Current Device

Open the account menu by clicking your avatar
Click Sign out
Your session is ended and you are redirected to the login page

Sign Out Everywhere

To sign out from all other devices at once:

Go to Settings → Account → Security & access (app.zenovay.com/settings/account/security)
Under Active sessions, click Revoke all other sessions

Changing your password also ends every other session. You can change your password from the account menu, which opens the secure password flow on auth.zenovay.com.

Cross-Device Session Behavior

Each device maintains its own independent session. This means:

Logging in on your laptop does not affect your phone session
Signing out on one device does not sign you out on others, unless you revoke it from the Active sessions list

However, changing your password ends every other session, so you are signed out everywhere except the device where you made the change.

Security Re-Verification

For sensitive account actions, Zenovay re-verifies your identity. For example, disabling two-factor authentication requires you to enter a current authenticator code, and changing your password goes through the secure flow on auth.zenovay.com.

Best Practices

Security Habits

Never stay logged in on public computers
Sign out before leaving shared devices
Use private/incognito mode on untrusted devices
Keep your browser updated
Periodically review your Active sessions list and revoke anything unfamiliar

When to Sign Out

You should sign out when:

Using a shared or public computer
Lending your device to someone
You suspect unauthorized access
You are done working for the day on a non-personal device

Troubleshooting

Signed Out Unexpectedly

If you keep getting signed out when you didn't sign out yourself:

Check that your browser allows cookies from Zenovay
Ensure you are not using incognito/private mode (sessions do not persist after the window closes)
Verify that browser extensions are not clearing cookies
Check the Active sessions list in case another device revoked the session

Cannot Log Back In

Your account may be locked from too many failed attempts -- wait and try again
Use the "Forgot password" link to reset your password
Contact [email protected] if issues persist