Current version: VRChat 2020.3.2p4, build 982

Problems:

1)"Created too many sessions for that user"

When trying to log in from too many places, this happens.

There could be multiple reasons : logging in from multiple browsers,

using different wifi, vpn, your ip dynamically changing, etc.

This security "feature" does not allow you to log in until all active sessions expire.

Most often suggested solution is to wait for a few hours but

I saw a few people who could not log in for days.

It's hard to reproduce but logging in from many browsers and steam client at the same time

and changing between different ips and re-logging everywhere could cause the issue.

2)Active sessions do not expire on password reset

If account was compromized, what do you do? Reset password.

And it does not invalidate currently active sessions.

That's a security concern. And in case of "Created too many sessions for that user" bug affecting you

even password reset would not give you back access to your account.

3)There's no apparent way to log out on all devices

There should be a way do that as a "log out everywhere" button

or / and a list of currently active sessions you could manage and clear.

I think It's possible to protect yourself in case of compromise by changing password,

turning on 2fa and turning it back off but it's a hacky workaround if all you want to do

is invalidate currently active sessions. I'm not sure whether it clears them completely

but even if it does it does not allow you to do that if you can't log into your account

cause you got "Created too many sessions for that user" error.