account security question

today (3/31/22) someone on my discord group mentioned that i was logged into roll20. i hadn't logged in since the previous saturday evening possibly early sunday morning (3/26-27/22). checking through my games list it shows that ive played several games within the last week that i have not been logged into for several months if not longer as well as some more recent games within the last few days that i hadnt played on since last week. ive gone through my email and found no evidence of password recovery and my password is unique to roll20 so im not sure how or even why someone would attempt to steal my password. is there someway this showing of being logged in could be faulty?

If you close the tab/window of an active game instead of hitting the exit game button, it will continue to show you as being in the game.  Just be sure to leave the game by way of that button in the settings tab before you close the window and it won't show you as logged into that game when you actually aren't.

I don't think that is why the ghost accounts show up still in session.  I've thought it was one of the API's personally thats doing it but I have atleast 2-3 of my players that are ghosted in my live sessions that aren't really there.  Even I show up as there when I'm not.  

What Kraynic stated was the common wisdom explanation. But given that the occurrence is so sporadic, it's hard to pin down. I don't think the API has access to anything that would do that though. It can't spoof another account, and the object that lists players is read only. Further, if a player is not logged in, it doesn't even have that.

DM Eddie said: I don't think that is why the ghost accounts show up still in session.  I've thought it was one of the API's personally thats doing it but I have atleast 2-3 of my players that are ghosted in my live sessions that aren't really there.  Even I show up as there when I'm not.   I don't know if it is always the cause, but I know it is a cause of someone showing as still logged into a game.  One of the people I play with does it all the time.

Kraynic said: DM Eddie said: I don't think that is why the ghost accounts show up still in session.  I've thought it was one of the API's personally thats doing it but I have atleast 2-3 of my players that are ghosted in my live sessions that aren't really there.  Even I show up as there when I'm not.   I don't know if it is always the cause, but I know it is a cause of someone showing as still logged into a game.  One of the people I play with does it all the time. I don't think any of my players use the exit key and I know I never do.  Right now I have 2 ghosted players in my session.  Feels too random to be it for sure, however I never have ghosted players in my heroquest game and that has no scripts or even character sheets loaded in it.