Two factor authentication is the single biggest improvement you can make here. Without it, anyone who learns your password can pause your vaults.
Two factor authentication
A six digit code from your phone, on top of your password.
Use any authenticator app: 1Password, Authy, Google Authenticator, Bitwarden. You will also get eight backup codes for the day you lose your phone.
Scan this with your authenticator app, then enter the code it shows.
Cannot scan? Enter this key by hand:
Change your password
Changing it signs out every other device immediately.
Sessions
Signing out everywhere invalidates every saved session, on every device, straight away. Your vaults keep running.
Your backup codes
Each code works once. Save them somewhere that is not your phone, because that is the device they replace. This is the only time they are shown.
Turn off two factor
Your password becomes the only thing protecting the account. Enter it to confirm.