---
title: "Enforce Logout after Password Change"
slug: "enforce-logout-after-password-change"
updated: 2025-09-25T08:08:04Z
published: 2025-09-25T08:08:04Z
canonical: "zenoplesupport.aqore.com/enforce-logout-after-password-change"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://zenoplesupport.aqore.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enforce Logout after Password Change

## Enforce Logout After Password Change

To enhance account security, the system invalidates all active authentication tokens immediately after a user changes their password. This action ensures that ongoing sessions authenticated with old credentials are terminated, forcing the user to re-authenticate with the updated password.

### Key Functionality

- Token Invalidation:
  - This action is triggered when user perform the “Change Password” action in the Profile section of an Office Staff.
  - When a user successfully changes their password, the current authentication token is blacklisted or marked invalid immediately.
  - All other active tokens linked to the same user are also invalidated to prevent unauthorized access.
- Immediate Logout:
  - The user is forcefully logged out immediately after the password change is complete.
  - For devices other than the one where Password Change is initiated, any subsequent action will trigger Logout.
- User Experience:
  - Upon password update, the user is redirected to the login screen.
  - A message is displayed during the process stating *"Your password has been changed. Please log in again to continue."*