Active Sessions
Managing active sessions allows you to control all devices and browsers from which your HashCore Pulse account is logged in. v0.6.0 This is an important security tool — especially if you suspect unauthorized access or simply want to end old sessions.
What is a session
A session is created every time you log into HashCore Pulse from a new device or browser. Each session has its own authorization token that automatically renews as long as you are actively working.
Session parameters:
- Device and browser
- IP address from which the login was performed
- Date and time of last activity
- Geographical location (by IP)
Where to find the list of sessions v0.6.0
- Go to Settings → Security → Active Sessions
- A list of all active sessions for your account will open
The current session (the one you are in now) is marked with a special indicator «Current session».
The interface footer also displays information about the last login: date, time, and IP address.
Ending a session
End a single session
- Find the desired session in the list
- Click Sign out next to it
- Confirm the action
After ending the session, the user on that device will be automatically logged out and redirected to the login page.
The current session cannot be ended through this list — to log out of the current session, use the Sign out button in the profile menu.
End all other sessions
Click Sign out all other sessions — all sessions except the current one will be immediately ended. Use this option if you have lost a device or suspect account compromise.
Token lifecycle v0.5.0
HashCore Pulse uses a two-tier token system for session management:
- Access token — a short-lived authorization token. It automatically renews every 15 minutes in the background without user intervention.
- Refresh token — a long-lived token. The session remains active as long as you regularly use the system. It expires after 7 days of inactivity — after which re-login will be required.
When working in multiple browser tabs simultaneously, the authorization state is synchronized between them. Logging out from one tab ends the session in all open tabs.
Signs of suspicious activity
We recommend periodically checking the list of active sessions. Reasons for concern:
- Unfamiliar IP address or country
- Session created at an unusual time
- A device you do not use
If you find a suspicious session — immediately end it and change your password. We also recommend enabling two-factor authentication.
Two-Factor Authentication
Two-Factor Authentication (2FA) adds an extra layer of security to your HashCore Pulse account. `v0.2.0` Even if an attacker learns your password, they won't be able to log in without the second factor.
Delete Account
Account deletion is an irreversible operation that completely removes all your data from HashCore Pulse. `v0.1.0` This operation complies with GDPR requirements (Article 17 – right to erasure).