--- title: Prevent account sharing description: "The Single Session Enforcement module (formerly Cheat Off) keeps one active session per member: when an account logs in on another device, the older session is logged out." url: "https://ultimatemembershippro.com/docs/cheat-off/" updated: "2026-10-18" category: "Registration & Login" --- # Prevent account sharing 3 minBeginnerUltimate Membership Pro 14.2+ · Module Single Session Enforcement is an Ultimate Membership Pro module that allows [one active session per member](https://ultimatemembershippro.com/features/login-security/): the newest login wins, and the older device is logged out. It helps you prevent account sharing, so one paid account doesn't turn into several users when members share their login with friends. The module was called **Cheat Off** in earlier versions. This guide switches it on for the Coaching Club site and sends logged-out devices to a page that explains what happened. Before you start - Your license is active. This module needs an active license; see [Find and activate your license key](https://ultimatemembershippro.com/docs/where-to-find-your-license-key/). - You have a page to show to the device that gets logged out, for example “Signed in elsewhere”, with a short explanation and a link to the Login Page. ## How it works 1. When a member logs in, the plugin marks that browser as the member's current device, with a [cookie](https://developer.wordpress.org/advanced-administration/wordpress/cookies/). 2. Someone logs in with the same account on another device. That device becomes the current one. 3. At its next page load, the first device is logged out and sent to the Warning Redirect page. Each browser counts as a device: another browser or a private window on the same computer counts too. Several tabs in the same browser are one device. Administrators are never logged out by the module. ## Switch on the module 1. Go to Ultimate Membership Pro*›*Modules and open **Single Session Enforcement**, in the **Security & Login** group. 2. Switch on **Activate/Hold Single Session Enforcement**. [![Single Session Enforcement settings switched on, with Cookie Expire Time 365 Days and Warning Redirect set to the page Signed in elsewhere](https://ultimatemembershippro.com/wp-content/uploads/2026/10/ump-account-sharing-01-settings.png)](https://ultimatemembershippro.com/wp-content/uploads/2026/10/ump-account-sharing-01-settings.png) The module on, with a warning page for logged-out devices. Cookie Expire Time How long a browser keeps the marker that identifies it as the member's device. Keep the default unless you have a reason to change it. Default: **365 Days** Warning Redirect: The page the logged-out device lands on. With **...**, the member stays on the page they asked for, now as a visitor: a [members-only page](https://ultimatemembershippro.com/docs/how-to-restrict-any-page-or-group-of-pages/) then sends them to its redirect or shows its locker. The list also shows your custom Redirect Links; see [Add your own redirect links](https://ultimatemembershippro.com/docs/can-i-use-external-links-for-redirect/). Default: **...** Click Save Changes. Members already logged in are tracked from their next page load. ## Test it with a member account 1. Log in as a test member in one browser. 2. Log in with the same member in a second browser or a private window. 3. Go back to the first browser and reload the page. It's logged out and shows your Warning Redirect page. Explain it on the warning page The plugin doesn't show a message of its own. Say on the warning page why the member was logged out, and add a link to log in again. Logging in there makes that device the current one. Good to know - Members who use a phone and a laptop can't stay logged in on both. Tell them, for example in your terms or FAQ. - A browser that blocks cookies looks like a new device on every page, so the member's other devices keep getting logged out. - Test as a member: administrators are never affected, so testing while logged in as admin shows nothing. ## Example: Coaching Club **Single Session Enforcement**Emma's friend logs in with Emma's account on his laptop. Emma's next click logs her out and shows the warning page. **Activate/Hold Single Session Enforcement** : On **Cookie Expire Time** : 365 Days **Warning Redirect:** : Signed in elsewhere **Warning page text** : You were logged out because your account was used to log in on another device. Log in again to continue. ## Troubleshooting Why do both sessions stay logged in? Both sessions stay logged in when the module isn't switched on and saved, or when you test with an administrator instead of a member account. The first device is only logged out when it loads a new page. Why does a member keep getting logged out? A member keeps getting logged out when they are logged in on another browser or device, or when someone else uses their account. Ask them to log out of the other devices, and to allow cookies for your site. Why do logged-out members land on the home page or a login page? Logged-out members land on the home page or a login page when Warning Redirect is set to ..., so they see what visitors see on that page. Pick your warning page. Why does the Single Session Enforcement card say Activate license? The Single Session Enforcement module needs an active license. Activate your license under Ultimate Membership Pro*›*Licensing. ## What's next [**Block brute-force login attempts**Lock out repeated failed logins.](https://ultimatemembershippro.com/docs/security-login/)[**Log in with a one-time link**Help a member who can't log in.](https://ultimatemembershippro.com/docs/log-in-with-a-one-time-link/)[**Set up the login form**Templates, links and messages.](https://ultimatemembershippro.com/docs/set-up-the-login-form/)[**Restrict your first page**Choose what visitors see.](https://ultimatemembershippro.com/docs/step-3-restrict-pagescontent/)