What to do when you lose a device?

Announcements Policy
1

Before you begin

Take a deep breath. Seriously, losing a device, for any reason, is a stressful situation. Take a few moments to breath - while frustrating it’s not the end of the world.

Alert the team

Send a PM to @IT and your manager. Give them the details of what happened, so they can help assist with next steps. Be open and honest. We’re not here to scold, or chastise you, we want to help.

Unable to access here?

Email it@runningremote.org.

Device stolen while unlocked?

Email urgent@runningremote.org

Technical tasks

  • Revoke sessions. Navigate to /my/preferences/security and log out of your lost device.

  • Revoke GitHub sessions. Navigate to https://github.com/settings/security, scroll to the bottom, select “see more” for your lost device, then “Revoke session”

  • Rotate your GitHub SSH key. Navigate to https://github.com/settings/keys and delete the key stored on your lost device. You’ll also need to create a new key - this can be done now or at a later time.

  • Rotate any GitHub Personal Access Tokens stored on the lost device. Navigate to https://github.com/settings/tokens, select the token, and click regenerate.

  • Revoke Google Sessions. Navigate to https://myaccount.google.com/device-activity and sign out of Google from the lost device.

  • Consider other services used on the device that may have active sessions. These may be work related or personal. They should also be revoked.

Alert law enforcement

Was your device stolen? Be sure to file a report with the appropriate law enforcement agency. Keep a copy of the report in case it is needed in the future. It is not necessary to submit to Discourse, but uploading to dev is a convenient way to not lose it :smiley:.

If Apple Device

Via Apple’s Find My tool, mark the device as lost, so you’ll be alerted if it comes back online.

Monitor for suspicious activity

Your Discourse device should be encrypted, and uses a strong password/biometrics, so a bad actor should not be able to access the system. Regardless, there is a greater risk of compromise when a bad actor has physical access. Over the coming weeks/months, keep an eye out for unusual and/or suspicious activity. Report any concerns to the team via the PM you created above.

I’ve reviewed and understand what to do if my device is lost or stolen.

2 Likes