Skip to content
Security

Account security

Sessions, sign-out, and keeping your account and keys safe.

SessionsPermalink to Sessions

Signing in starts a session that is renewed in the background while you work. If renewal fails — because the session expired or was ended elsewhere — you are returned to the sign-in page rather than left on a screen that silently stops updating.

Signing out ends the session on the server, not only in your browser.

Where this happens in the console

Protecting your accessPermalink to Protecting your access

  • Store API keys in a secret manager, never in a repository.
  • Give each key a name that says where it is installed, so you can revoke precisely.
  • Revoke immediately on any suspicion of exposure — revocation is instant.
  • Sign out of shared machines.
  • Remove people from an organization as soon as they no longer need access.

Report a suspected compromise

If you believe an account or key has been compromised, revoke the key first and then contact support. Revoking first limits the window; investigation can follow.