Max 1 concurrent session. New logins automatically kick older sessions. Device fingerprints are tracked over a 30-day rolling window (max 3 devices).