Close, rotate and stop safely
Finish changes before ending the tunnel.
Save any intended change and sign out of Keycloak before closing the console. Close the console and use Stop to end the SSH connection. Closing or rotating the administration screen closes its tunnel rather than keeping an unattended session alive.
The embedded WebView’s cookies, cache, history and web storage are cleared when the console closes and before a new session. This does not remove server-side account records or your server’s audit logs.
Returning later requires a fresh connection and Keycloak authentication as required by the server. Losing Wi-Fi, mobile data, SSH access or the app process can interrupt unsaved work.
For a lost device, follow your organization’s response process: revoke the relevant SSH key and server sessions. Removing an Android profile is a local action; it does not revoke the public key on your server.