Respond to a lost device or compromised account

Revoke a device

In Settings › Account & Sync › Devices, choose Revoke next to the device. It’s signed out. Its own hosts and keys stay on it, and its copies of team vaults are removed the next time it reaches the server.

Remove a team member

Removing a member rotates the key of each vault they could open, so they get nothing new. It can’t take back what’s already on their devices.

Caution

If they may have seen credentials that matter, change them: new keys, new passwords.

Stop an admin’s changes (self-hosted)

If you suspect an admin’s account is compromised, set this on the server and run docker compose up -d:

STERNWAY_DELEGATED_SIGNING=off

The server refuses every team change an admin signs, at once. Owners’ changes still go through. Nothing already kept is undone.

Next steps

• Set team policies and roles
• How teams and trust work