Clearing 'Remember my login' Tokens

Still need help?

The Atlassian Community is here for you.

Ask the community

Introduction

When a user logs in to a JIRA site, they have the option of making JIRA remember their login on a specific computer and browser, by selecting the 'Remember my login...' check box before they click the 'Log In' button. Upon doing so, a 'Remember my login' token is stored by the JIRA server and a cookie containing this token is set in the user's browser.

A user who revisits a JIRA site from the same computer and browser, will automatically be logged in if JIRA detects that one of the user's 'Remember my login' tokens has a matching token contained in one of that browser's cookies. If the user logs out of JIRA, the 'Remember my login' token (which matches the relevant browser cookie) is cleared from the JIRA server.

To maximise and maintain the security of your JIRA site, JIRA provides features for:

  • clearing 'Remember my login' tokens associated with individual user accounts and
  • clearing all 'Remember my login' tokens stored by your JIRA site.

These features are especially useful in situations where users have been accessing your JIRA site in a public environment, selected the 'Remember by login...' check box before logging in, but have forgotten to log out.

On this page:

Clearing 'Remember my login' Tokens from a User Profile

A JIRA user can clear all of their own 'Remember my login' tokens from JIRA through their user profile. To do this:

  1. Visit your User Profile.
  2. In the Details section, click the 'Clear All Tokens' link. The Remember my login message box appears.
    Screenshot: 'Remember my login' message box
  3. Click the 'Clear All Tokens' button. All tokens associated with your user account will be removed from the JIRA server.

Clearing a User's 'Remember my login' Tokens from the Administration Console

JIRA administrators can clear all 'Remember my login' tokens associated with a user's account through the JIRA administration console. To do this:

  1. Log in as a user with the JIRA Administrators global permission.
  2. Choose > User Management.
    (tick) Keyboard shortcut: 'g' + 'g' + start typing 'users'
  3. Click the Username or Email Address of the user whose 'Remember my login' tokens you wish to remove. Details about that user and their login information is displayed.
    (tick) To restrict the list of users shown in the User Browser, use the Filter form at the top of the User Browser. Specifying (part of) the user's email and/or group, then clicking the 'Filter' button, will reduce the list to only those users who match those criteria.
  4. Click the 'Remember My Login' link to display that user's Remember My Login page.
    Screenshot: A User's 'Remember My Login' Page
  5. Click the 'Clear All' button to remove all 'Remember my login' tokens associated with this user account from the JIRA server.

Clearing all 'Remember my login' Tokens from the JIRA site

JIRA administrators can also clear all 'Remember my login' tokens from their JIRA site through JIRA's administration console. To do this:

  1. Log in as a user with the JIRA Administrators global permission.
  2. Choose > System. Select Security > Remember My Login to open the Remember My Login for All Users page.
    (tick) Keyboard shortcut: 'g' + 'g' + start typing 'remember my login'
    Screenshot: The 'Remember My Login for All Users' Page
  3. Click the 'Clear All' button to remove all 'Remember my login' tokens from the JIRA server.
Last modified on Feb 12, 2014

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.