Changed password on Trello PC web . But App still connects on old PW

[Steve Ac]

I wonder if anyone could help, I am super concerned

I changed the password on Trello on PC/Web  .  But the app on Android is still connecting via the old password. It is not a cache issue for sure, as I tried setting up a couple of test cards on the App and it is picking up on PC/Web

I stopped the App and restarted, and still the same problem. I know I can uninstall and reinstall using the new password , but I am quite concerned about the security here.

Additionally, I have noticed that in the settings under "Sessions" only the current PC session IP address is showing. The Android session (which is currently active and under a different password) is not showing - so the option to "Log out other sessions" does not work

[Mike]

Trello's mobile apps do use your password to connect the very first time, but then a token is generated, and they connect in the future via the token, not your password. So, if you change your password, the app's connection is not affected. The app isn't connecting via the old password, it just has a token authorization that remains valid through password changes.

You can do as Iain suggested if you want to log in again with your new password, but another token will be created just the same if you do that.

[Iain Dooley]

@Steve Ac try revoking access to the Trello Android app from the settings page in the "Applications" section

[Steve Ac]

I can do this, but surely this is a security concern? For me I don't mind that my Android app is accessing the site under the wrong password

[Steve Ac]

I can do this, but it doesnt solve the underlying security issue of Apps being able to login under previous passwords