The profile page now lists where an account is signed in

The profile page is now split into "General", "Security" and "API Tokens". Under "Security" every place the account is signed in is listed, with browser, operating system, city and country, IP address and last activity, and one click ends every other session.

• Each API token shows when and from where it was last used, or "Never used".
• "Check 2FA" tests a code from the authenticator app without changing anything on the account.
• A token with full access now carries a warning that it can act on behalf of the account.
• The current session is marked as such and stays signed in when the others are ended.

Release notes