Account session
An account session is an active sign-in to a messenger account from a specific device or program; while the session is open, messages can be read and sent from it without entering a code again.
What it is
Every time an account is opened on a new phone, computer or in a browser, a session appears. It lives until someone ends it. The list of active sessions is in the messenger settings: device, place, time of last activity.
How it looks in practice
A manager signed in to the work Telegram from a personal laptop, then from a home computer, then in the web version at an acquaintance’s. All three sign-ins keep working. Half a year later the manager leaves the company, and the sessions remain. They still see the correspondence and can write to clients in the company’s name.
WhatsApp has similar logic for linked devices: the phone with the number is the main one, the others are connected to it and shown in a separate list.
Why it matters
Changing the password is not enough. An already open session often keeps working without signing in again. The reliable way is to end all foreign sessions and check that only known devices remain.
What to check
The list of active devices: regularly, not after an incident. An unknown device or city is a reason to end the session at once and change the second factor. When an employee is dismissed, end all their sessions on work accounts the same day.
The typical mistake
Not knowing how many devices are connected to the work number. While nobody has opened that list, any former employee may still be inside.
More in Signals
- Telegram CRM: what a sales leader should check before choosingBefore choosing a Telegram CRM, a sales leader answers five questions for themselves: whose numbers and accounts these are, who owns the conversations, who knows what about a client, what the company gives to a bot and what to people, and what happens to clients when a number gets limited. Legality and data location are worked out separately — against platform rules, your country’s law and with a lawyer.
- Viber CRM: what a sales leader should settle before choosingBefore choosing a CRM for Viber, a sales leader settles five things: whose name the numbers and phones are in, who owns the conversations, who sees what in the chats, what the company gives to the official business channel and what to people, and what happens to clients when a number gets limited. Legality, recipients’ consent and data location are worked out separately — against platform rules, your country’s law and with a lawyer.