announcement product-update

Log in from any device — multi-device support is here

Up until now, logging into BlueOrbit from a new device meant logging out everywhere else. Open the app on your phone? Your laptop session dies. Switch to a tablet? Back to the login screen.

That’s fixed. You can now stay logged in on up to 3 devices at once.

How it works

Previously, BlueOrbit stored one session per user. When you logged in from a new device, it overwrote the existing session — invalidating every other device’s login.

Now, each login creates its own independent session with its own:

  • Access token — the short-lived key that authorizes API requests
  • Refresh token — the long-lived key that silently renews your session
  • DPoP key — a cryptographic proof that ties the token to your specific device

Your phone, laptop, and tablet each hold a different set of credentials. They never interfere with each other.

What about session limits?

To keep things tidy, BlueOrbit keeps up to 3 active sessions per account. When you log in from a fourth device, the oldest unused session is automatically cleaned up. No manual management needed.

Security

Your tokens and cryptographic keys are encrypted at rest using Fernet (AES-128-CBC with HMAC-SHA256). Nothing is stored in plaintext — not your access tokens, not your refresh tokens, not your device-specific signing keys. Each session is fully isolated: a compromise of one device’s credentials doesn’t expose any other session.

Sessions are also capped at 3 per account, limiting the blast radius if a device is lost or stolen. Old sessions are pruned automatically on each new login.

Logging out

  • Log out on one device → only that device’s session is removed. Other devices stay logged in.
  • Log out of all devices → every session is deleted. You’ll need to log in again everywhere.

The “log out of all devices” option is available in your account settings.

What didn’t change

Your experience. The login button works the same way. Your workflows run the same way. The only difference is that switching devices no longer logs you out of everything else.