I want to allow only one session at the time across browsers and PCs. I want to "disconect" or log out to the old session if a new session starts in Wordpress.
You can do this by changing
Update: it's better to invalidate all secret keys. They can be generated by Wordpress own generator here: https://api.wordpress.org/secret-key/1.1/