Revoking sessions
Enhanced plan
On this page
Section titled “On this page”- What “revoke” means
- How to revoke
- Propagation time
- Revoke vs. expiry
- The session list
- See also
What “revoke” means
Section titled “What “revoke” means”Marks the session as revoked. Any device that hits the URL after revocation is rejected.
How to revoke
Section titled “How to revoke”There’s no session detail page — revoke is reachable two ways from the Label Checking table:
- Inline (fastest). P&H Cloud Platform (Beta) → Label Checking → click the PowerOff icon in the row’s Actions column → confirm in the “Revoke this session?” dialog.
- From Edit. Click the Settings icon on the row → click “Revoke session” at the bottom-left of the Edit dialog → click again to confirm (two-click pattern).
Propagation time
Section titled “Propagation time”The admin UI tells the operator the link stops working immediately. In practice it can take up to ~30 seconds because the Cloud Platform side caches session reads for 30s — usually much faster.
Revoke vs. expiry
Section titled “Revoke vs. expiry”Both end the session. Revoke is for “lock out now”; waiting is for “let it expire naturally.”
The session list
Section titled “The session list”Two tabs:
- Active — sessions currently usable (within TTL, not revoked).
- All — every session including expired and revoked. Useful for audit.
See also
Section titled “See also”- Creating a session — the setup that gets revoked.
- Plan gate — why TTL is the security model.