While Two-Factor Authentication (2FA) adds a second layer of protection to user accounts, this dashboard gives you an eye view of that security. It allows you to see who has enabled 2FA, which devices they are using, and most importantly, to terminate active sessions if you suspect an account has been compromised.
Session Tracking
At the top of the page, you will find a real-time summary of user activity:
- Active Sessions: The total number of people currently logged into your website.
- Active Users: How many unique individuals are currently browsing.
- Unique Devices: The number of different computers or phones used to access the site.
- Expiring Today: Sessions that are scheduled to automatically log out soon based on your security settings.
2FA Users
This section provides a detailed list of every registered user on your site (Administrators, Editors, Customers, etc.)
- 2FA Type: See at a glance which method a user is using (e.g., Email OTP, Authenticator App, or Not Set).
- Activity Monitoring: Track the number of active sessions and devices per user, as well as their last activity timestamp.
- Bulk Actions: You can search for specific users or use the “Delete all 2FA” button to reset 2FA configurations for everyone in case of a site-wide security update.
Session Maintenance
This is a tool for maintaining the site users. If you need to log everyone out immediately, use the Session Maintenance tools at the bottom:
- Clean Up Expired: Removes old session data from your database to keep your site running fast.
- Revoke All Active: Instantly logs out every single user. They will be forced to log in again and pass their 2FA check.
- Delete All Sessions: Clears all session records entirely.
