«Your session expired.» or «Your session ended.» (unauthorized)

Symptom

The console shows «Your session expired. Sign in again.», «Your session expired. Sign in again to continue.» or «Your session ended. Sign in again.» and returns to the sign-in page. The API answers 401 unauthorized.

Cause

• The session reached the end of its lifetime (up to eight hours; a recovery session lasts 15 minutes).
• The session was revoked: by the person («Sign out everywhere», changing the password), by an administrator, by an authenticator reset or by suspending the account.
• The passkey or phone that opened the session was removed.
• The account or the organization was suspended.

Fix

1. Sign in again.
2. If the session ended for no clear reason several times in a row, check «Protect» › «Signed-in browsers» for sessions you do not recognise.
3. If you cannot sign in at all, see Could not verify the identity.

When to escalate

If you suspect someone revoked your sessions or the account was suspended without notice, contact your administrator. An unexpected revocation may be part of a security incident response.