# Sessions & devices

Under **Settings → Account**, the security section shows all active sign-ins of your account.

## Active sessions

- Each session shows **browser, IP address and last activity** — so you spot foreign or forgotten logins immediately.
- Sessions expire automatically after **30 days of inactivity**; as long as you're active, you stay signed in.

## Logging out

- **End a single session** — e.g. the login on your old laptop.
- **"Log out everywhere"** — ends all other sessions except your current one. The right move if you signed in on someone else's machine and forgot to log out.

## Password

- **Change/set**: Settings → Account → Security → "Change password" — a confirmation code arrives by email. Minimum length: 10 characters.
- No password set? Then you sign in via email code or Google/Microsoft — perfectly fine. Details: [Create an account & sign in](https://docs.kalender-sync.de/en/getting-started/create-account/).

:::tip[Your mailbox is the key]
Login codes and password resets run through your email address — whoever controls your mailbox can get into your Kalender Sync account. Secure your mailbox with two-factor authentication.
:::