How to view active sessions on Coinbase? (Security monitoring)

Accessing Session Management Dashboard

1. Log into your Coinbase account using verified credentials and two-factor authentication.

2. Navigate to the user profile icon located in the top-right corner of the interface.

3. Select Settings from the dropdown menu to enter the account configuration panel.

4. Scroll down to the Security section and click on Active Sessions.

5. The page loads a real-time list of all currently authenticated devices and locations tied to your account.

Interpreting Session Details

1. Each session entry displays the device type, operating system, browser name, IP address, and approximate geographic location.

2. A green checkmark next to a session indicates it was recently verified via 2FA or biometric confirmation.

3. Timestamps show both login time and last activity — sessions inactive for over 90 days are flagged with a grayed-out label.

4. Unknown or suspicious locations trigger an orange warning icon beside the city name and country code.

5. Hovering over any IP address reveals its ASN provider and whether it originates from a known data center or residential network.

Terminating Unauthorized Access

1. Locate the session you wish to revoke and click the three-dot menu icon adjacent to its entry.

2. Select Sign out to immediately invalidate that session’s authentication tokens.

3. Confirm the action using your primary 2FA method — SMS, TOTP, or hardware key prompt appears instantly.

4. Revoked sessions disappear from the list within five seconds and cannot re-authenticate without full credential re-entry.

5. If multiple unrecognized sessions appear simultaneously, Coinbase automatically suspends new sign-ins until manual verification completes.

Enabling Session Alerts

1. Within the Active Sessions page, toggle the switch labeled Email notifications for new logins.

2. Enable Push alerts for unrecognized devices under the same section to receive instant mobile notifications.

3. Configure custom alert thresholds by specifying minimum geolocation distance between successive logins.

4. All alerts include truncated IP addresses and device identifiers — full details remain accessible only after re-authentication.

5. Alert history is stored separately in the Security Logs tab for up to 180 days.

Frequently Asked Questions

Q: Can I view sessions from mobile apps separately from web browsers?A: Yes. Coinbase categorizes sessions by client type — “Coinbase Mobile iOS”, “Coinbase Android”, and “Web Browser” appear as distinct entries with separate logout controls.

Q: Does signing out of one session affect my API keys or connected third-party services?A: No. Session termination only invalidates interactive authentication tokens. API keys, OAuth grants, and whitelisted addresses remain fully operational unless manually revoked.

Q: Why does my home IP address sometimes show a different city than my actual location?A: Geolocation databases map IP ranges to physical regions based on ISP registration records, which may lag behind infrastructure changes or reflect upstream carrier locations rather than end-user geography.

Q: Are sessions visible when using Coinbase Wallet standalone app?A: No. Coinbase Wallet operates independently with its own authentication layer and does not share session data with the main Coinbase.com platform.