בדיקת מכשירים והתחברויות
Review where your account is signed in, and sign out any browser or device you don’t recognize.
Every browser or app where you sign in creates a session. Reviewing your sessions from time to time is the fastest way to notice something wrong.
See your sessions
- Go to Settings > Security.
- On the Security tab, find Browsers and Devices.
Each session shows its browser and operating system, when it was last active, and when it signed in. The session you’re using now is marked This device.
Sign out a session
- In Browsers and Devices, find the session.
- Select the trash icon labeled Sign out, and then confirm with Sign out.
To end every session except the one you’re using, select Sign out all other sessions, and then confirm. Aster checks each session on every request, so a signed-out device loses access the next time it contacts Aster.
Remove trusted 2FA devices
If you select Trust this device for 30 days when you sign in with two-factor authentication, that device skips the code for 30 days. These devices appear in Trusted 2FA devices on the Security tab.
- To remove one device, select Revoke next to it.
- To remove all of them, select Revoke all trusted devices.
Changing your password also removes every trusted 2FA device.
Revoke a paired app
The Trusted Devices tab appears in Settings > Security after you pair a desktop or mobile app with your account. Each entry shows when it was Paired and when it was Last seen.
- Go to Settings > Security, and then select the Trusted Devices tab.
- Select Revoke next to the device, and then confirm. To remove every paired device, select Revoke all.
Revoking a device signs it out and deletes the key it stored locally. To use it again, pair it again by entering the code it shows at app.astermail.org/link-device.
Turn on login alerts
Login alerts are off until you turn them on.
- Go to Settings > Security.
- In Login Alerts & Sessions, turn on Login Alerts.
When it’s on, Aster sends a message to your Aster inbox each time someone signs in to your account. The alert includes the device, the browser, the time, and an approximate location when one is available. In the same section, Recent Sign-ins lists up to 50 of your most recent sign-ins.
Sign out automatically after inactivity
- Go to Settings > Security.
- In Login Alerts & Sessions, turn on Session Timeout.
- In Timeout Duration, choose 5, 15, or 30 minutes, or 1, 2, 4, or 8 hours.
If you see a session you don’t recognize
- In Browsers and Devices, select Sign out all other sessions.
- Change your password. This also signs out every other session and removes your trusted 2FA devices.
- If two-factor authentication is off, turn it on.
- In Account Recovery, select Get new codes to replace your recovery codes.
- Go to Settings > Mail Rules and check for rules you didn’t create.
- Open a support request and describe what you saw.
Troubleshooting
- You don’t see the Trusted Devices tab: It appears only after you pair a desktop or mobile app.
- A session you signed out still appears: Refresh the page. If it’s still listed, sign it out again and change your password.
- You don’t get login alerts: Make sure Login Alerts is on, and check your Aster inbox. Alerts don’t go to your recovery email.
- A mail client connected through Aster Bridge isn’t listed: Bridge clients don’t sign in to Aster directly. To manage their access, see App passwords for other clients.
Related articles
המאמר הזה עזר לך?