Auditing and Terminating Active Sessions

Most major AI platforms provide built-in tools to monitor and manage active login sessions. If you suspect your account has been compromised, you should immediately inspect these sessions to identify and terminate unrecognized devices.

  • ChatGPT: Navigate to Settings > Security and Login > Active Sessions. You can view all logged-in devices and terminate them individually or select "Log out all" to clear every session at once. If you need to change your password, you must log out first, then use the "Forgot password" flow to receive a reset code via email.
  • Claude: Access your account security via Settings > Account > Active sessions. You can hover over any suspicious session and click the three vertical dots to terminate it, or use the "Log out of all devices" option. Note that Claude uses email-based magic links rather than passwords, so there is no password to reset if a breach occurs.
  • Perplexity: This platform does not provide a list of active sessions. If you suspect unauthorized access, the only option is to navigate to All settings and select "Sign out of all sessions" to force a global logout. You will then need to re-authenticate via the email-based code system.

Best Practices for AI Account Security

Beyond monitoring active sessions, standard security hygiene is essential for protecting AI-powered services:

  • Enable Multi-Factor Authentication (MFA): Where supported (such as ChatGPT and Perplexity), MFA is the most effective defense against unauthorized access. It ensures that even if a password is stolen, the attacker cannot gain entry without the second factor.
  • Use Password Managers: Always use unique, complex passwords for every service to prevent credential stuffing attacks from impacting multiple accounts.
  • Understand Platform Authentication: Be aware of how your chosen platform handles identity. Some services, like Claude, rely exclusively on email-based magic links, which shifts the security burden entirely to the integrity of your email account. Ensure your email provider is also secured with strong MFA.