Remove someone safely

Revoking access rotates the keys of every host the person could reach. They cannot decrypt anything the team changes from now on.

Steps

1. Team → Members, choose the person, Remove (or revoke a single host or group under Access).
2. ReTerminal rotates the affected host keys and re-encrypts them for everyone who still has access. This needs an owner or DevOps to be online — it happens in their app.
3. Change the server passwords or keys the person used.

Note: Step 3 is yours, not ours. Someone who had access may have written a password down. Rotation stops future access through ReTerminal; it cannot un-see the past.

Devices

Removing a member also signs out all their devices from the team. Their personal space is untouched.