Respond to a lost device or compromised account

このコンテンツはまだ日本語訳がありません。

Revoke a device

In Settings › Account & Sync › Devices, choose Revoke next to the device. It’s signed out. Its own hosts and keys stay on it, and its copies of team vaults are removed the next time it reaches the server.

Remove a team member

Removing a member rotates the key of each vault they could open, so they get nothing new. It can’t take back what’s already on their devices.

Stop an admin’s changes (self-hosted)

If you suspect an admin’s account is compromised, set this on the server and run docker compose up -d:

STERNWAY_DELEGATED_SIGNING=off

The server refuses every team change an admin signs, at once. Owners’ changes still go through. Nothing already kept is undone.

Next steps

Set team policies and roles
How teams and trust work