Atlacare keeps you signed in on a device so you're not logging in all day, while re-checking your access regularly in the background so a change takes effect quickly.
Staying signed in
Once you sign in, you stay signed in on that device. In the background, Atlacare re-checks your account against the server roughly every minute — so if your access changes (your role changes, or you're made inactive), it takes effect almost straight away without you signing out and back in.
Signing out other devices
Lost your phone, or used a shared computer and forgot to sign out? Go to Settings → Security and sign out of all other devices. Your current device stays signed in; every other session is ended immediately and needs a fresh login.
Do this any time you're not sure a device is safe — it's instant and there's no downside.
Protect the login itself
The strongest thing you can do is turn on two-factor authentication, so even a stolen password isn't enough to sign in as you.
If you think an account has been accessed by someone else, sign out other devices, change the password, and turn on 2FA — in that order.