- Users
- Passwords and Active Sessions
Passwords and Active Sessions
How to change your own Astalty password, and how to sign yourself out of Astalty everywhere else you are still logged in.
Overview
Both actions live on your own profile, and both need your current password:
- Change Password sets a new password. It also signs you out of Astalty in every other browser you are logged in to.
- Logout all other sessions signs you out of those other browsers without changing your password.
Either way, the device you are using stays signed in. You will not be kicked out of the screen you are working on.
Neither action affects anyone else's account. You can only change your own password — Admins cannot set a password for another User. To get a colleague back into their account, see Password Issues & Account Access.
Changing Your Password
- Select your initials at the bottom of the main menu, then select My Profile.
- Select Change Password, at the top right of your profile.
- Enter your existing password under Current Password.
- Enter your new password twice, under New Password.
- Select Update Password.
As you type, Astalty shows whether your new password meets each requirement:
- At least 8 characters
- Contains uppercase and lowercase letters
- Contains at least one number or special character
Before you submit, the drawer tells you what is about to happen:
Changing your password will sign out your other active sessions. You'll stay signed in here.
Once saved, you will see a Password updated message, and Astalty emails you to confirm the change.
What Happens to Your Other Sessions
Changing your password ends every other browser session on your account. The next time someone tries to use one of those sessions — another computer, another browser, or a browser window you left open somewhere else — they are returned to the login screen and have to sign in with the new password.
This is automatic. There is no setting to turn it off, and no option to keep another session alive.
The same applies when you reset a forgotten password using Forgot Password on the login screen. The new password takes effect and the old sessions stop working.
Signing Out Your Other Sessions
Use this when you do not need a new password — you just want to be sure you are not still logged in somewhere. A shared office computer, a borrowed laptop, or a phone browser you used once are all good reasons.
- Select your initials at the bottom of the main menu, then select My Profile.
- Select Security in the profile menu.
- On the Active Sessions card, select Logout all other sessions.
- Enter your current password, then select Confirm.
You will see an Other sessions signed out message. Your current session is untouched.
What Isn't Signed Out
Both actions are limited to browser sessions. They deliberately leave the following alone, so that changing your password does not quietly break things you have set up:
| Stays signed in | Why |
|---|---|
| The Astalty mobile app | So a Support Worker mid-shift is never locked out of the app |
| API keys | These are integration credentials, not a login — revoking them would break whatever is using them |
| Connected apps, such as the Outlook add-in | These are separate authorisations you granted, and are managed from the app itself |
Things to Keep in Mind
- You only ever change your own password. There is no way for an Admin to type in a new password for another User. They can reset 2FA and resend an invite, but the User sets their own password.
- Astalty signs you out after 2 hours of inactivity regardless of any of the above.
- Being asked to log in again elsewhere is expected. If a colleague changes their password and then finds they have to sign in again on another computer, that is the feature working, not a fault.
Where to Go Next
- Updating User Profiles and Changing Passwords — update the rest of your details, and what to do when you cannot log in at all.
- Two Factor Authentication — add a second step to signing in.
- Security Overview — how Astalty protects your account and data.