It's clear to me why and how you authorize a new device (which can actually be a new browser from a different/non-recognized IP).
my question is if it's possible to "de-authorize" a device previously authorized. Is there a list of the previously authorized devices where I can choose to de-authorize any of them?
Unfortunately no. However, because the IP is part of the unique identifier, we felt that these previously authorized devices were highly unlikely to be used in an attack in the future.