PIN, trusted devices and active sessions
Quick sign-in on your own device and remote termination of an unfamiliar session.
Where to find it
Sign in to your account first
In this guide
PIN works only together with a secret stored for a particular trusted browser. It is not a replacement account password that works on every device. The same Security tab also lists active sessions: existing sign-ins that you can terminate remotely. This guide combines PIN, trusted devices, sessions and checking sign-in notifications.
A device and a session are different
| Trusted PIN browser | Can start a future PIN sign-in from that browser. Revoking it removes that trust; review existing sessions separately. |
|---|---|
| Active session | Current access after a completed sign-in. Ending it removes that access; it is not a password change and does not replace revoking PIN trust. |
| Second factor | With Authenticator enabled, PIN sign-in also needs a code. Knowing the PIN does not remove the additional confirmation. |
When to enable PIN
- Use your own device with a screen lock. Avoid persistent browser trust on a shared, borrowed or public computer.
- Keep your main login and password separately. Clearing site data, changing browsers or revoking the device can make PIN unavailable even when you remember its digits.
- Have your current password and, if protection is enabled, an Authenticator or recovery code ready. Avoid a PIN obviously related to public listing information.
Enable and check PIN
Open enrollment
In Settings → Security press Enable PIN. On a phone, start from the dashboard menu. Enrollment applies to the browser you are currently using, rather than every device you own.
Complete the form
Enter the current password, the second factor when required, then the PIN and its confirmation. Follow the length indicated in the form. Give the browser a recognizable name such as Personal phone without including identity-document details or a password.
Trust this browser
Press Trust this browser and wait for success. The trusted-device list shows the entry and identifies the current browser. The secret is kept in browser data; do not copy it into messages or attempt to transfer it manually.
Use PIN at the next sign-in
On Sign in, enter the same email or login. If stored trust is available, the PIN option appears. Enter the PIN and complete the second factor if enabled. If PIN is temporarily locked, use the password or recovery instead of trying more combinations.
Review and end sessions
Review Devices
In Security, compare the browser, activity time and available location for each entry. Your current sign-in is marked Current. Location information can be unavailable or reflect the network connection, so assess it alongside timing and your actual device usage.
End an unnecessary sign-in
Press End session for the relevant entry and confirm Yes, end session. On a narrow screen the action may appear as a sign-out icon. Ending the current session immediately signs you out on that device, so check your saved credentials beforehand.
Revoke unnecessary trust
In the separate Trusted devices list, use Revoke for a lost or shared browser. If you suspect unauthorized access, also change the password and review the email address. A password change revokes all PIN devices and ends other sessions.
Example: a lost laptop
From your phone, open Security, end the laptop session and separately revoke its PIN trust. Then change the password if it may be stored on the lost device. Revoking PIN alone is not a complete review of existing sign-ins.
A new-sign-in notification
A new sign-in can create a security event in the notification center. Open it and inspect sessions if you do not recognize the device. A notification does not automatically block the unfamiliar device. Do not use security links sent by a contact; open Settings directly and keep your PIN and one-time codes private.
If PIN or the list is unavailable
The PIN option disappeared
Check that you are using the same browser and account. After clearing data or changing the password, sign in with your main method and enable PIN again if needed.
The device limit was reached
Follow the form’s current error and revoke entries you no longer need. Do not remove your last working access route before checking the login, password and second factor.
A session could not be ended
Check the connection, refresh the list and inspect the result. If the entry remains and the access is suspicious, change the password from an available session and contact Support with the error description, excluding secrets.
FayVay