---
title: Enforcement Modes
description: "SessionQuota Pro includes three enforcement modes. Each mode controls what happens when a user reaches the allowed number of active sessions. ![](data:image/gif;base64,R0lGODdhAQABAPAAAP///wAAACwAAAAAAQABAEACAkQBADs=) ## Block new login This mode prevents the new login from completing when the session limit has already…"
url: "https://handyplugins.co/docs/enforcement-modes/"
updated: "2026-03-16"
category: SessionQuota Pro
---

# Enforcement Modes

SessionQuota Pro includes three enforcement modes. Each mode controls what happens when a user reaches the allowed number of active sessions.

![](data:image/gif;base64,R0lGODdhAQABAPAAAP///wAAACwAAAAAAQABAEACAkQBADs=)

## Block new login

This mode prevents the new login from completing when the session limit has already been reached.

### Best for

- Membership sites that want to reduce account sharing
- Sites that need a visible login block instead of silent session replacement
- Teams that want users to consciously free up an existing session

### What the user experiences

- The new login attempt is blocked
- Existing sessions remain active
- You can optionally allow recovery by email so the user can log out other sessions

### Good to know

- This mode works best when the limit is greater than `0`
- It is the clearest option for discouraging credential sharing

## Logout oldest session(s)

This mode allows the new login, then removes the oldest existing session or sessions needed to stay within the limit.

### Best for

- Sites that want a smoother user experience
- Membership sites where users switch devices often
- Teams that want automatic cleanup instead of manual intervention

### What the user experiences

- The new login succeeds
- The oldest active session is terminated automatically

### Good to know

- This mode respects the configured session limit
- It is usually the most balanced choice between convenience and control

## Logout all other sessions

This mode always keeps only the latest session active and logs out all other sessions after a successful login.

### Best for

- Sites that require one active device per account
- High-control environments
- Membership sites with a strict anti-sharing policy

### What the user experiences

- The new login succeeds
- All other active sessions are terminated

### Good to know

- This mode acts like strict single-session mode
- Advanced limit rules are not used in this mode
- The global session limit is effectively ignored because only one session is allowed

## Which mode should you choose?

Choose `Block new login` if:

- You want the strongest visible deterrent against account sharing

Choose `Logout oldest session(s)` if:

- You want less friction for legitimate users

Choose `Logout all other sessions` if:

- You want one session per account, every time