Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Celebration

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root

Avatar

1 badge earned

Collect

Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!

Challenges
Coins

Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.

Recognition
Ribbon

Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!

Leaderboard

Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,416,276
Community Members
 
Community Events
170
Community Groups

Changed password on Trello PC web . But App still connects on old PW

I wonder if anyone could help, I am super concerned

 

I changed the password on Trello on PC/Web  .  But the app on Android is still connecting via the old password. It is not a cache issue for sure, as I tried setting up a couple of test cards on the App and it is picking up on PC/Web

I stopped the App and restarted, and still the same problem. I know I can uninstall and reinstall using the new password , but I am quite concerned about the security here.

 

Additionally, I have noticed that in the settings under "Sessions" only the current PC session IP address is showing. The Android session (which is currently active and under a different password) is not showing - so the option to "Log out other sessions" does not work

 

2 answers

0 votes
Mike Atlassian Team Jun 25, 2019

Trello's mobile apps do use your password to connect the very first time, but then a token is generated, and they connect in the future via the token, not your password. So, if you change your password, the app's connection is not affected. The app isn't connecting via the old password, it just has a token authorization that remains valid through password changes.

 

You can do as Iain suggested if you want to log in again with your new password, but another token will be created just the same if you do that.

0 votes
Iain Dooley Community Leader Jun 22, 2019

@Steve Ac try revoking access to the Trello Android app from the settings page in the "Applications" section

I can do this, but surely this is a security concern? For me I don't mind that my Android app is accessing the site under the wrong password

I can do this, but it doesnt solve the underlying security issue of Apps being able to login under previous passwords

Suggest an answer

Log in or Sign up to answer
TAGS

Atlassian Community Events