diff --git a/backend/rvoc-backend/src/cli/mod.rs b/backend/rvoc-backend/src/cli/mod.rs
index 7244723..d43bbe1 100644
--- a/backend/rvoc-backend/src/cli/mod.rs
+++ b/backend/rvoc-backend/src/cli/mod.rs
@@ -37,9 +37,8 @@ enum Cli {
     /// Apply pending database migrations.
     ApplyMigrations,
 
-    /// Expire the passwords of all users.
+    /// Expire the passwords and sessions of all users.
     /// This should always succeed, and users who update their passwords simultaneously should receive an error.
-    /// Note that this does not expire all sessions.
     ExpireAllPasswords,
 
     /// Expire all sessions of all users.
@@ -163,6 +162,8 @@ async fn expire_all_passwords(configuration: &Configuration) -> RVocResult<()> {
         )
         .await?;
 
+    expire_all_sessions(configuration).await?;
+
     Ok(())
 }