Suggestions
:speech_balloon:
Implement a "Logout of all sessions" feature
Implement a “Log out of all sessions” in settings, invalidating all login sessions.
I was reminded of this when TOTP got implemented. Typically when you enable TOTP, a user would get logged off automatically.