Review and revoke your sessions

Every phone signed in to your Kit Pay account holds a session, and the app lets you see all of them in one list. Reading that list occasionally is one of the highest-value security habits there is: it answers, in seconds, the question that otherwise nags — is anyone else in here?

Reading the list

Open the security area of Settings and find your sessions. Each entry describes a device that can currently act as you. Most people see exactly what they expect: the phone in their hand, maybe the old handset still in a drawer. What you are looking for is the entry you cannot explain.

• A device type you have never owned.
• A sign-in from a time you know you were not signing in.
• The phone you sold last month, still listed as active.

Ending a session

1. Pick the session you do not recognise or no longer use.
2. Choose to sign it out, and that device loses its access to your account.
3. If anything about the strange session worried you, change your wallet PIN as well — a session tells you where the door was open, not what was seen through it.
4. Report anything suspicious through Help in the app so it is on record.

Make it a habit at the right moments

You do not need a calendar reminder; you need triggers. Check sessions when you move to a new phone, after a phone is lost or stolen, after lending the handset to anyone, and any time the app behaves as if someone else touched it. Between those moments, the list quietly keeps itself.

And if you are ever signed out unexpectedly, that can be the system protecting you rather than failing you — why Kit Pay signs you out explains the difference.