# Logout/Reset cookie for shield

**URL:** <https://discuss.elastic.co/t/logout-reset-cookie-for-shield/61879>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [September 29, 2016, 11:11pm UTC](https://discuss.elastic.co/t/logout-reset-cookie-for-shield/61879 "2016-09-29T23:11:20Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![suanmeiguo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/suanmeiguo/32/11758_2.png) [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\
**Post date:** [September 29, 2016, 11:11pm UTC](https://discuss.elastic.co/t/logout-reset-cookie-for-shield/61879/1 "2016-09-29T23:11:20Z")

</div>

I've installed shield 2.4.0 on elasticsearch 2.4.0 but not on kibana. Now when I go to [http://localhost:9200/\_count](http://localhost:9200/_count) a window prompt out for username and password. I logged in as a normal user with read only access.

Later on I want to switch to admin, how can I do this? It seems any following operation assume the normal user role with read access. I cannot "logout" current user.

Thank you!

---

<div class="post-metadata">

**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\
**Post date:** [September 30, 2016, 7:45am UTC](https://discuss.elastic.co/t/logout-reset-cookie-for-shield/61879/2 "2016-09-30T07:45:44Z")

</div>

Hi Vincent,

When you point your browser directly at a Shield-protected Elasticsearch cluster, it uses the browser's built in http basic auth support, which caches successful credentials for the life of the browser. This is the way that browsers work, which we cannot control. This is a big part of why we created the Shield Plugin for Kibana, so we could have a proper login/out experience.

If you'd like to run commands against the cluster, with proper login-logout, etc, I suggest [installing Sense](https://www.elastic.co/guide/en/sense/current/installing.html) into Kibana, and running your requests from there.

Thanks,  
Steve

---

<div class="post-metadata">

**Author:** ![suanmeiguo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/suanmeiguo/32/11758_2.png) [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\
**Post date:** [October 4, 2016, 5:47am UTC](https://discuss.elastic.co/t/logout-reset-cookie-for-shield/61879/3 "2016-10-04T05:47:05Z")

</div>

Got it. Thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:41pm UTC](https://discuss.elastic.co/t/logout-reset-cookie-for-shield/61879/4 "2017-07-06T13:41:44Z")

</div>