Sessions
The Sessions screen lets you see who is currently logged in to the POS, on which devices, and sign individual devices out remotely. It's the place to go when a device is lost or stolen, when a cashier leaves, or when you simply want to review active logins.
You'll find it at WP Admin > POS > Settings > Sessions.
Manage active user sessions. You can view all logged-in users, see their devices, and terminate sessions if needed.
How it works
The screen has two panes:
- Users (left) — every user with at least one active session, with a green dot on anyone active in the last few minutes, a You chip for your own account, and a count of how many sessions each user has. A filter box lets you search by name or username.
- Sessions (right) — select a user to see one card per active session.
Each session card shows:
| Field | What it means |
|---|---|
| Application | Where the user is logged in — iOS Application, Android Application, Desktop Application, or Web Application — plus the browser/version |
| Current device | A chip marking the session you're using right now |
| Last active | How recently the session made a request (e.g. Just now, 5 minutes ago) |
| IP | The IP address the session connected from (or N/A) |
| Created | When the session first signed in |
| Expires | When the session token expires |
| User Agent | Expand to see the raw browser/device user-agent string |
A session is shown as Active now when it has made a request within the last 5 minutes.
Signing devices out
Three actions are available, each behind a confirmation dialog:
- Terminate — sign out a single session. Use the button on that session's card.
- Logout Other Devices — sign the selected user out of every device except the one they're currently using. Shown when the user has more than one session.
- Logout All — sign the selected user out of every device, including the current one.
If a phone, tablet, or laptop with the POS on it goes missing, open Sessions, select the affected user, and use Terminate on that device's session (or Logout All to be safe). The device loses access on its next request.
Terminating your own current session signs you out of the device you're on right now — you'll be asked to confirm before that happens.