Sessions, security, and signing out everywhere

Signing in with a magic link creates a session on that browser lasting 7 days. Practical security notes:

• Sign out everywhere (Account section) revokes every session on every device and browser at once. Use it if you lose a device or clicked a sign-in link somewhere you should not have.
• Sign-in links are single use and expire quickly; requests are rate limited per address and per network to prevent abuse.
• There are no passwords to breach. Access to your proxigenta account is exactly as strong as access to your email inbox, so protect that inbox with strong authentication.

Behind the scenes: session cookies are signed and revocable, admin surfaces are separately protected, and device keys and one-time links are stored hashed, and deployment credentials live in a managed secret store. Security issues can be reported to info@proxigenta.com and are taken seriously during the beta.