How do I cut off a trader's access immediately?
Quick answer
Rotate the account's password, which revokes every session for it. For a stronger action, also unassign or archive the account. Open terminals are signed out at their next token refresh, within at most 15 minutes, and cannot log in again with the old password.
Detailed answer
There are three levels of action depending on the situation.
1. Rotate the password
The quickest way to remove access while keeping the account active, for example after a password leak.
2. Unassign or reassign
Removes the account from the trader record and revokes sessions. Also removes it from the trader's account switcher.
3. Archive
Takes the account out of active use and revokes sessions. Use it when the account should not trade again.
Timing
Each action revokes refresh tokens immediately. Access tokens are short-lived, valid for up to 15 minutes, and verified by signature for speed, so a terminal that is already open can continue until its token expires. This is a deliberate trade-off between speed on every order and how quickly revocation takes effect.
If you also need to stop trading on positions
Firms can close an account's open positions from the admin panel, and a manual breach ends the account immediately with a recorded reason.
PropExecutor team · Updated
Related questions
- The PropExecutor trading terminalWhat happens to a trader's session when I rotate the password?
- Security, data and reliabilityHow are trader sessions secured?
- Security, data and reliabilityHow long can a revoked session keep working?
- How do I rotate a trading account's password?
- Can I close or archive an account?
All 23 questions in Managing accounts and traders · Every category