Option: Sign out all devices after password reset

[Khalixi 5]

Hello

this is basic but very much needed when there’s someone on my account I don’t want anymore but at the moment emby after changing the password the other user can still be logged in

could we have this option in password reset page please 

This is helpful because sometimes you log in on someone else’s home device or in a hotel, after I no longer need it I can’t get rid of it 

 

Edited June 23 by CBers
Moved to Feature Requests forum.

[Khalixi 5]

^ This is for emby connect account 

[mrbobdobolina 1]

I agree that this should be a fairly basic/standard function in this day in age. It should be brought down to the Emby Connect account level for that user to manage the sign-ins and not dependent upon the server owner having to remove devices from the server side.

Edited 19 hours ago by mrbobdobolina

[Khalixi 5]

Yes!

it’s frustrating that the user would be dependent on the admin to limit access in order to remove that one device 

because even if you change password or email still that device would be able to login because there is no option to logout of all connected devices 

I honestly don’t understand why this isn’t available especially for emby connect, I hope the devs can enlighten me

 

[ebr 16462]

On 6/23/2026 at 6:14 AM, Khalixi said:

^ This is for emby connect account 

Hi.  Exactly what password are you changing?  For Emby Connect, the password would be on the Connect/Forum account and you may not (probably don't) even know that.

[Khalixi 5]

From here:

https://emby.media/community/index.php?/lostpassword

[ebr 16462]

9 minutes ago, Khalixi said:

From here:

https://emby.media/community/index.php?/lostpassword

Okay, so how are you doing that for one of your users?  You know their Emby Connect credentials?

Those credentials are intended to be managed by the end user, not the server admin.  They should be able to change their password without consequence.

If you wish to invalidate their connection to your server, simply change the password on the local user account on your server.  That should invalidate all access tokens.

[Khalixi 5]

Im not doing it for anyone he’s doing it for his account and reported that he can’t git red of device that has access 

after having a local password if he signs in through emby connect portal it would ask for his local password as well ?

[ebr 16462]

19 minutes ago, Khalixi said:

after having a local password if he signs in through emby connect portal it would ask for his local password as well ?

No. If using Connect, he would still use his normal Connect credentials.

[Khalixi 5]

So by using emby connect login user cannot disable device access,

That’s why I’m requesting this feature so it would be logged off and request the new password 

[ebr 16462]

That ID and PW are managed by this forum software, not us or your server but changing the local password should do what you want.

We're working on new, better login methods that should make this moot.

[mrbobdobolina 1]

Here is a scenario that I myself went through a couple of days ago. I am a Emby Connect user with whom someone has shared their server.

I had changed the password that I use to log into the Emby app in a web browser, mobile devices and TV streamer. However after this password update, the devices on which I had previously logged in did not prompt for the new password. They remained signed in as normal. There is currently no way under my account for me to trigger a sign out of all devices, nor can I even see where/on what devices I am logged in.

As I understand it, I have to reach out to the server owner and have them look on their server for devices logged in under my account and kick them off. Is this correct? If so, I think this is what OP is really driving at. An account user should be displayed a list of devices on which their account is logged in and allowed the option to sign out of them without need of contacting the server owner.

Will these "new, better login methods" resolve this particular issue?

[ebr 16462]

9 minutes ago, mrbobdobolina said:

As I understand it, I have to reach out to the server owner and have them look on their server for devices logged in under my account and kick them off. Is this correct?

No.  You just need to ask them to change the password on your local user account on their server.  This should invalidate all logged in sessions.

10 minutes ago, mrbobdobolina said:

without need of contacting the server owner.

The server owner should be a friend or family member.

11 minutes ago, mrbobdobolina said:

Will these "new, better login methods" resolve this particular issue?

Yes, because it will eliminate this dual login that we have now.  It will take a bit of time.

[ebr 16462]

Having said that, this is still a valid FR because it could be useful to sign out all logged in devices as a user.  For instance, you signed in at an AirBnB and forgot to sign out.