Changing Password does not disable signed-in clients

[Tobias]

I did a reset and change of the 'app' password. However, this did not kick-out apps that are already signed-in. I'm baffled by how this could have been missed. As it seems, I have no way of blocking access of people no longer associated with the household.

Is this yet another sign of the level of maturity of this technology?

[brandt]

Changing the password [I]should[/I] invalidate the access tokens