Managing Your Account
Sessions, multiple devices, and what happens when you change or reset your password.
Managing Your Account#
Your Neriyam account is shared across every device and browser tab where you sign in. This page explains how those sessions interact — what happens when you sign in from somewhere new, when you change or reset your password, and when your organization signs you out.
Working across multiple devices and tabs#
You can be signed in to Neriyam in more than one place at the same time. There is no one-device-only restriction.
- Your laptop at the office, your laptop at home, and your phone can all stay signed in simultaneously
- Multiple browser tabs on the same device can each hold their own session
- Each tab can even have a different organization active — handy when you belong to more than one (see Switching organizations)
Each session is tracked independently on the server. Activity in one tab or device does not affect your session anywhere else.
Switching organizations inside a tab clears that tab's cached data. Other tabs are not affected — they keep showing whatever organization they were on.
Changing your password#
When you change your password from your profile (see Signing In for the procedure), Neriyam treats it as a security event:
- The device and browser tab where you actually changed the password stay signed in
- Every other device and browser tab where you were signed in is signed out
- Those other sessions will see "Session expired" the next time they try to do anything, and have to sign in again with the new password
Why: a password change usually means you want to lock other places out — for example, after using a shared computer, or when you suspect someone might have learned your old password.
If you only want to sign out of the current browser, use Logout from the avatar menu instead — that leaves your other sessions alone.
Resetting a forgotten password#
When you reset your password using the Forgot Password flow (see Signing In), the security treatment is stricter than a voluntary change:
- Every active session for your account is ended, including any session that might still be open elsewhere
- You sign in again on every device after the reset
This is by design. A forgotten-password reset is the path used when an account might have been compromised, so Neriyam clears every session to be safe.
The reset code arrives by email. If you control the email address, you control the account — that is what makes the reset secure. Reset codes are single-use and expire after a short time.
Signing out#
Choosing Logout from the avatar menu signs you out of the current browser only. Other devices and other browser tabs stay signed in.
To sign out everywhere at once, change your password — that ends every other session in one step.
Session expiry#
If you leave Neriyam open and idle for a long time, your session may expire. The exact timeout is configured by your organization; some organizations set no timeout at all.
When an expired session next makes a request, Neriyam shows "Session expired" and sends you back to the sign-in page.
- Saved data is fine — it lives on the server
- Unsaved form data is lost; save your work before stepping away
Refreshing the page or clicking around resets the inactivity counter. As long as you keep using Neriyam, your session keeps refreshing.
When the organization signs you out#
Some organization-wide settings affect every user, and Neriyam needs every user to pick up the new value on next sign-in. The clearest example is the format settings — the date format, time format, currency format, and number format used across the app. These are cached per session, so when an admin changes them, every signed-in user in the organization is signed out.
This is rare. Format settings are usually configured once, during initial setup.
- The admin who makes the change is warned before confirming, so they know everyone will be signed out
- You will see "Session expired" on your next request and need to sign in again
- Saved work is fine; unsaved form data is lost
See System Settings for the admin-side experience.
Apart from format settings and the password-change/reset cases above, your organization cannot manually sign you out. Admins can disable a user account or remove a user from an organization, but there is no "kick this user off right now" action.
Last updated