What does revoking a device actually do?
Sync & devices · Help center · Current as of 2026-10-10
Short answer
It stops that device syncing with your account: its session is finished and it can no longer push or pull. What it does not do is reach into the device and remove anything — the copy of the vault already there stays where it is. Revoking is the right first move for a device you have lost, but it is not a remote wipe and should not be relied on as one.
Where the list is
Settings, then Sync, then Devices. Every device that has signed in to the account is listed with the name it registered under — a browser shows up by platform, the phone apps as iPhone or Android device — along with when it was last seen, which device you are on now, and a Revoke button for the others.
What revoking can and cannot reach
- Can: end that device's sync session, so no further change reaches it and nothing it does reaches you.
- Cannot: delete the vault already stored on it. That copy is encrypted at rest and needs the vault passphrase, but if someone has both the device and the passphrase, revoking does not stop them.
So treat a lost device as a passphrase problem, not just a session problem. Lost phone recovery works through the order to do things in.
Resetting the account password revokes everything
Completing a password reset signs every device out, including the one you are using, on purpose: a reset is what you do when you suspect somebody else has your account password, and leaving their session alive would defeat it. Sign in again afterwards on each device you still have.
Try KeyNesta free. The web app needs no sign-up.
Open the web app All platforms