# Reset all login tokens

**URL:** <https://meta.discourse.org/t/reset-all-login-tokens/14590>\
**Category:** Feature\
**Created:** [Avril 8, 2014, 8:39 UTC](https://meta.discourse.org/t/reset-all-login-tokens/14590 "2014-04-08T20:39:15Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)\
**Post date:** [Avril 8, 2014, 8:39 UTC](https://meta.discourse.org/t/reset-all-login-tokens/14590/1 "2014-04-08T20:39:16Z")

</div>

With the recent [Heartbleed](http://heartbleed.com/) vulnerability, I think it would be a good forward-looking feature to be able to **reset/clear all user login tokens** , and maybe some other breach recovery-oriented operations.

There doesn’t need to be any actual UI for this, just a TUI.

(This post was inspired by Github resetting all login tokens after they upgraded their OpenSSL versions.)

(edit) I think this accomplishes it:

```sql
UPDATE users
SET auth_token = NULL
 -- WHERE all rows
;

```

---

_[View the full topic](https://meta.discourse.org/t/reset-all-login-tokens/14590)._