Any way to invalidate a Minecraft session ID or auth token?

[Mr Skeltal]

As seen here [URL]https://minecraft-statistic.net/en/player/Tylerc.html[/URL]
Someone is using my account, but they don't have my password or email.

[nikomo]

Not sure if this is valid, no idea when it was written.
[quote="https://www.wurst-client.tk/wiki/Special_Features/Force_OP_(Session_Stealer)/"]A session in Minecraft remains valid until the owner of the account invalidates it or replaces it with a new session. In practice, that means either launching Minecraft or pressing the Log Out button in the Minecraft launcher.[/quote]

[chipsnapper]

I'd try changing your account password, that would usually kick an auth token out
Anyhow, how did someone get your token without you account details? Is it like SteamGuard where a file from the steam directory needs to be stolen?

[Mr Skeltal]

[QUOTE=chipsnapper2;50727743]I'd try changing your account password, that would usually kick an auth token out
Anyhow, how did someone get your token without you account details? Is it like SteamGuard where a file from the steam directory needs to be stolen?[/QUOTE]

They could have gotten it from me posting an error log somewhere.