Challenge 2 / 2

You add a “log out of other devices” button. After the user types their current password to confirm, what’s the simplest thing you can do so their old sessions get kicked out?

Change their email address and change it back — that forces a fresh login everywhere

Clear the browser cookies on your server for every device they might be using

Re-hash the password and save the new hash to the database

Encrypt the password with a new key each time they click the button

Rewatch the video