Checking devices and applications that accessed your account

Which devices and apps reach your Zendesk account, and how to cut off the ones you no longer use. Everyone checks their own; nobody can do it for you.

Which devices and apps reach your Zendesk account, and how to cut off the ones you no longer use. Everyone checks their own; nobody can do it for you.

Check it

1. Click your profile image at the top right and open your profile.
2. Open the Security Settings tab and click Devices & Apps.
3. Read the two sections: My Devices, everything you have signed in from, and Third-party Applications, everything you authorised.
4. Click Remove on a device you no longer use, or Revoke on an application you no longer want connected.

Rename a device by clicking its name. A meaningful name is what makes next quarter's check quick.

This list is yours alone

It is in your own profile, and nobody else can see it, admins included. So this is not a review an admin runs for the team; it is a habit each team member has, and the admin's job is to ask for it.

Turn on the sign-in alert

In the Email Notifications section, set it to On. You then get an email each time somebody signs in from a new device, which is the earliest warning you will get that your credentials are being used by somebody else.

What you are looking for

• Applications you do not remember connecting. Often a trial from two years ago.
• Devices you no longer have. An old laptop, a phone you traded in.
• Anything you cannot account for at all.

Unused access is the risk

An integration nobody uses still has a token and still has whatever permissions it was given. Nobody is watching it, and nobody would notice if it started behaving differently.

Revoke and see what breaks

For anything you genuinely do not recognise, revoke it and wait. If something stops working, you now know what it was and can reconnect it deliberately. Leaving it because you are not sure is how these lists grow.

Make it quarterly

Put it next to your access review. The list only grows on its own, and it is one of the few security tasks that regularly turns something up.

If something looks genuinely wrong

A sign-in you cannot account for, or an application nobody connected: revoke it, change your password, and contact pluscloud support the same day.

See also

• General security practices for your Zendesk
• Viewing the audit log
• Designating an address for security notifications