Skip to main content

Manage user sessions

User session management helps users and admins review active sign-in states and revoke sessions when needed.

In Logto, you can manage sessions through three common paths:

  • Account API: For end-user self-service in your product account settings page.
  • Management API: For admin or support tools to manage sessions for any user.
  • Admin Console: For operator workflows in Logto Console without building custom tooling.

Choose the right API

ScenarioRecommended API
Let signed-in users manage their own active sessionsAccount API
Let admins or support teams manage sessions for a userManagement API
Let operators manage sessions directly in Logto ConsoleAdmin Console

View active sessions

Account API (self-service)

Use the Account API session endpoint to list the current user's active sessions.

Before exposing this capability to end users, make sure session management is enabled in Account center settings and your app requests the required Account API scope.

Management API (admin tools)

Use Management API when your admin system needs to list sessions for a target user.

Revoke sessions

Account API (end user revokes own sessions)

End users can revoke a specific session from their own session list.

For sensitive operations, Account API session management requires user verification before access. See Get a verification record id.

Management API (admin revokes user sessions)

Admins can revoke a target user's session by user ID and session ID.

Admin Console

If your team manages users directly in Logto Console, you can review active sessions and revoke specific sessions from the user detail page.

Sessions Manage user authorized apps (grants)

Account settings by Account API: Manage user sessions

Account settings by Management API: User session management

User management: Manage user active sessions