Skip to content

Revoking sessions

Enhanced plan
  • What “revoke” means
  • How to revoke
  • Propagation time
  • Revoke vs. expiry
  • The session list
  • See also

Marks the session as revoked. Any device that hits the URL after revocation is rejected.

There’s no session detail page — revoke is reachable two ways from the Label Checking table:

  • Inline (fastest). P&H Cloud Platform (Beta) → Label Checking → click the PowerOff icon in the row’s Actions column → confirm in the “Revoke this session?” dialog.
  • From Edit. Click the Settings icon on the row → click “Revoke session” at the bottom-left of the Edit dialog → click again to confirm (two-click pattern).

The admin UI tells the operator the link stops working immediately. In practice it can take up to ~30 seconds because the Cloud Platform side caches session reads for 30s — usually much faster.

Both end the session. Revoke is for “lock out now”; waiting is for “let it expire naturally.”

Two tabs:

  • Active — sessions currently usable (within TTL, not revoked).
  • All — every session including expired and revoked. Useful for audit.