Managing Active Sessions with Revoke Tokens

Revoke Tokens shows you everyone who is currently signed in to your Lever360 account — on both the web app and the mobile app — along with the specific devices they are signed in on. From this one screen you can end a single device's session, sign a person out of everything, or sign out every user on the account.

Revoking removes that person's access to Lever360 at that moment. It is the tool to reach for when you are deactivating an employee and want them out immediately, when a phone goes missing on a job site, when a tablet is being retired, or when you suspect someone has signed in to an account they should not have access to.

Step 1 — Navigate to Revoke Tokens

1. In the Lever360 web app, open Settings.

2. Select Company Settings.

3. Choose Revoke Tokens.

The Revoke Tokens window opens with a count at the top showing how many people are currently signed in.

The list is grouped by person. Each person's row shows their name, how many active sessions they have, and when they were last active. Tap the arrow on the right of any row to expand it and see the individual devices underneath.

The device and platform — for example, Edge 151 · Windows for a web session, or Apple iPhone 17 Pro · iOS 26.6 for a mobile session.

The app version — mobile sessions also show which version of the Lever360 app that device is running, which is useful when checking whether someone has updated.

Last active time — shown in plain relative terms, such as 1 minute ago or 26 minutes ago.

This device — the session you are currently using is marked with a This device badge, so you always know which one is yours.

Use the Search by name or device box at the top of the window to filter the list. You can search by a person's name or by a device name, which is helpful on larger accounts with many people signed in.

There are three levels of revoke, depending on how much access you want to end.

Option 1 — Revoke a Single Device

Expand a person's row, find the device you want to end, and select Revoke next to that device.

This ends the session on that one device only. The person stays signed in everywhere else. Use this when a specific phone or tablet has been lost or replaced.

Option 2 — Revoke Everything for One Person

Select Revoke on the person's own row, at the top of their group.

This ends every session that person has, across web and mobile at once. Use this when someone leaves the company or when you are not sure which of their devices is the concern.

Option 3 — Revoke All Tokens

Select Revoke All Tokens in the top right of the window.

This immediately pushes every user out of the system, across the whole account.

Deactivating an employee ends their access to Lever360. Revoking their tokens on top of that makes it take effect at that moment, with no waiting on a page refresh. When you are removing someone from the company, the safest sequence is to do both.

Recommended Sequence

1. Go to Employees and select the employee you are removing.

2. Directly under their name you will see Employee Status, showing as Active. Click the toggle to deactivate them.

3. Go to Settings → Company Settings → Revoke Tokens and revoke that person’s sessions.

Anyone whose session you revoke is signed out of Lever360 and will need to sign in again to continue working.

A device is lost or stolen — revoke that single device right away.

An employee leaves — deactivate their employee record, then revoke their sessions so it takes effect immediately.

A phone or tablet is retired or replaced — revoke the old device so it stops appearing in your session list

A routine access review — open the list periodically to confirm that everyone signed in should be.

Looking to learn more? Check out these related guides:

Managing User / Employee Permissions in Lever360

Adding a New Employee to Lever360

💡 Need help? Contact support or reach out through Lever360's help resources.

📧 Support Email: [email protected]

📞 Help Desk: 561.337.2900 x 2

📚 More Guides: docs.lever360.com/en