Signing someone out everywhere
Sessions live on the server and a “Keep me signed in” cookie is persistent, so closing a browser ends nothing. When a person needs to be signed out of every device at once, an Owner can do it from Settings → Organization → Users.
Who this is for: Owner (a permanent owner of the organization).
Reach for this when: an account was renamed or its role changed and the person is stuck on a stale profile; a device was lost; a person has left; or a session is suspected compromised.
Steps
- Open Settings → Organization → Users.
- On the person’s row, click Sign out everywhere.
- Read the confirmation and click Sign them out everywhere.
Every session that person holds ends immediately, on every device and browser. They sign in again as normal. Nothing else changes — their account, passkeys, authenticator, role, capabilities and history are exactly as they were. You stay signed in.
The action is recorded in the organization’s audit log (Settings → Recent Activity) as a deleted sign-in session, naming who did it and whose sessions ended.
Signing yourself out everywhere
Anyone can do this for their own account: Settings → Security → Signed-in devices → Sign out everywhere. It ends every one of your sessions, including the one you are using, and returns you to the sign-in page.
Common issues
- No “Sign out everywhere” button — only a permanent Owner sees it. Admins and other roles do not, and neither does a CartonCrew support session (see below).
- “This person also belongs to another organization” — sessions are account-wide, not per gallery. Signing out someone who is also a member of another organization would sign them out of that organization too, on your say-so, so CartonCrew refuses. The person can sign themselves out everywhere from their own Security settings, or a CartonCrew platform administrator can do it and it is recorded in every organization’s audit log.
- “Use Sign out everywhere on your own Security settings” — the Users screen action is for other people. Your own is under Security.
For CartonCrew support
A support session (act-on-behalf) cannot sign anyone out, even though it is owner-tier for everything else — the same reasoning that keeps account deletion out of it. A platform administrator can, from the platform API:
POST /api/platform/users/:userId/revoke-sessionsThis is the only route for a person who belongs to more than one organization. It writes one audit row per organization the person belongs to.
Last updated: 2026-09-05 · Applies to: CartonCrew v1.448+