gitlab-org--gitlab-foss/doc/user/profile/active_sessions.md

# Active Sessions

> - [Introduced](https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/17867)
>   in GitLab 10.8.

GitLab lists all devices that have logged into your account. This allows you to
review the sessions.

## Listing all active sessions

1. On the upper right corner, click on your avatar and go to your **Settings**.
1. Navigate to the **Active Sessions** tab.

![Active sessions list](img/active_sessions_list.png)
Display and revoke active sessions 2018-05-02 04:08:16 -04:00			`# Active Sessions`

			`> - [Introduced](https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/17867)`
			`> in GitLab 10.8.`

			`GitLab lists all devices that have logged into your account. This allows you to`
Remove ability to revoke active session Session ID is used as a parameter for the revoke session endpoint but it should never be included in the HTML as an attacker could obtain it via XSS. 2019-02-25 08:52:40 -05:00			`review the sessions.`
Display and revoke active sessions 2018-05-02 04:08:16 -04:00
			`## Listing all active sessions`

			`1. On the upper right corner, click on your avatar and go to your Settings.`
			`1. Navigate to the Active Sessions tab.`

			`![Active sessions list](img/active_sessions_list.png)`