How to invalidate a token when it is accidentally leaked

[HowieHz]

I used the method in the official documentation to get the token, but accidentally leaked my admin account token, resulting in someone else being able to access my umami admin account at will. I tried changing the admin account password, however that token is still valid.

[HowieHz]

@mikecao I'm sorry to bother you, but I was hoping you could take a look at this for me.

[HowieHz]

Looking at the source code, I see that modifying the hash salt invalidates the original token, but I'm not sure if this affects existing data in databases.

[mikecao]

This is correct. It won't affect the existing data.

[HowieHz]

Thank you for your reply. ❤️