A method comprising: at a server set: receiving, from each device of a plurality of devices, a login credential to log into an account in order to gain access to an associated service from the server set; responsive to authenticating the login credential, providing, to each device of the plurality of devices, a respective access continuation parameter, ACP, and a respective service token corresponding to the service, including a first service token for a first device of the plurality of devices; receiving the first service token from the first device for accessing the service; providing access to the service to the first device in response to receiving the first service token from the first device; receiving, from a second device of the plurality of devices different from the first device, a modification to the login credential; after receiving the modification to the login credential, inactivating the respective service token of each of the plurality of devices and invalidating the ACP of any lost, inactive or compromised electronic device of the plurality of devices; receiving the first service token from the first device for accessing the service; rejecting the first service token and directing the first device to provide the respective ACP of the first device; receiving the ACP from the first device; checking that the received ACP is valid; if the received ACP is valid, providing a new service token to the first device; and providing access to the service to the first device without receiving, from the first device, the modified login credential in response to receiving the new service token from the first device. receiving, from each device of a plurality of devices, a login credential to log into an account in order to gain access to an associated service from the server set; responsive to authenticating the login credential, providing, to each device of the plurality of devices, a respective access continuation parameter, ACP, and a respective service token corresponding to the service, including a first service token for a first device of the plurality of devices; receiving the first service token from the first device for accessing the service; providing access to the service to the first device in response to receiving the first service token from the first device; receiving, from a second device of the plurality of devices different from the first device, a modification to the login credential; after receiving the modification to the login credential, inactivating the respective service token of each of the plurality of devices and invalidating the ACP of any lost, inactive or compromised electronic device of the plurality of devices; receiving the first service token from the first device for accessing the service; rejecting the first service token and directing the first device to provide the respective ACP of the first device; receiving the ACP from the first device; checking that the received ACP is valid; if the received ACP is valid, providing a new service token to the first device; and providing access to the service to the first device without receiving, from the first device, the modified login credential in response to receiving the new service token from the first device.