Home / Help centre / Security & privacy
Security & privacy
Why was I suddenly signed out of all my sessions?
Cyberlop rotates refresh tokens on each renewal. If an old refresh token appears a second time, Cyberlop revokes all your sessions as a safety step. Sign in again, close old tabs and devices, and tell your administrator if you suspect someone else used your account.
Why this happens
Cyberlop keeps sessions short. It issues a short-lived access token and a refresh token that rotates every time it renews your session. Both live in HttpOnly, SameSite, Secure cookies.
Rotation means each refresh token works once. If Cyberlop sees an old one used again, it cannot tell whether that was a stale tab or a stolen copy. It plays safe and revokes all sessions for that account. The Security page describes this rule directly.
How to fix it
- Sign in again. One fresh session is all you need.
- Close old tabs and windows that still show the app. A forgotten tab that tries to renew with an old token is the most common cause of a repeat.
- Sign out of devices you no longer use, so only one session keeps renewing.
- Think about the last few days. If a shared computer or a browser sync tool could have copied your cookies, change your password.
- Tell your workspace administrator the time you were signed out. The Activity page records logins.
Still not working?
Our captured pages do not list other reasons for a forced sign-out, so we cannot name them. If it happens again with only one tab open, send the time and your browser name to our contact page.
SSO users go through their identity provider again, which may need its own sign-in first. For the full picture of how Cyberlop protects sessions, read session security. A short definition sits in session hijacking.
Related questions
- How are sign-in sessions secured?
- I'm locked out after several failed sign-in attempts. What happened?
- How do I sign out of Cyberlop?
- How do I revoke a user's API tokens?
- How are user passwords stored?
Updated · Back to the help centre
Security question we did not answer?
Our team will answer it directly, or walk through it on a call with your security lead.