01
What the Active sessions list shows
For available sessions, ChatGPT may show the browser or device, OpenAI application, approximate location, login date, and current device tag. This data helps you notice an entrance that you don't recognize.
A single line may represent several early OpenAI applications, and geolocation across the network may not be accurate. Evaluate several signs at once: device type, time, place and your own activity.
Find the CURRENT SESSION line.
Match other devices with your browsers and phones.
Check for unexpected dates and approximate regions.
02
How to end one or all sessions
To disconnect a specific device, select Log out next to its session and confirm the action. For a trusted device, the button can also remove it from the list of trusted devices.
If there are several unknown inputs or you are not sure about the security, select Log out of all sessions. The current session will end, and it may take up to 30 minutes to log out on other devices.
| Situation | Action | What then |
|---|---|---|
| One old device of your own | Log out for a specific session | Check if the line has disappeared |
| Unknown device | End session | Change password and check inputs |
| Several suspicious inputs | Log out of all sessions | Login again and enable MFA |
03
Why you should enable MFA after exiting
Multi-factor authentication adds additional confirmation the next time you log in. Available methods vary by account, country, and device, and may include an authenticator app, push, SMS, WhatsApp, or passkey.
It is important to follow the order: first close suspicious sessions, then change the password if necessary and set up MFA. Simply enabling MFA does not kick out devices that are already logged in.
04
What to do if there is unknown activity
If the entrance is unfamiliar to you, don't stop at closing it. Change your password, check your associated email and login methods, remove unknown trusted devices, and examine your account for unusual activity.
Use only the official ChatGPT website and application. Do not enter passwords, MFA codes, or active session data on random sites or send them to support chat.
Close unknown or all sessions.
Change the password if you are using a password login.
Check and strengthen MFA.
If the problem persists, contact OpenAI Support.
05
Security check after subscription activation
After any activation through an external service, it is useful to open Active sessions again and leave only familiar devices. The session is a sensitive access key, so it cannot be published, stored in notes, or resent to anyone unless necessary.
No password is required when subscribing through Unlimit. Once your order is complete, you can sign out of all devices as an additional measure and then sign in again on your own devices only.
Do not share your password or MFA codes with anyone. The support employee does not need them to check the payment or plan.