diff --git a/api/client-server/logout.yaml b/api/client-server/logout.yaml
index 2dfd6d97c..75a3ec87a 100644
--- a/api/client-server/logout.yaml
+++ b/api/client-server/logout.yaml
@@ -32,7 +32,8 @@ paths:
       summary: Invalidates a user access token
       description: |-
         Invalidates an existing access token, so that it can no longer be used for
-        authorization.
+        authorization. The device associated with the access token is also deleted.
+        `Device keys <#device-keys>`_ for the device are deleted alongside the device.
       operationId: logout
       security:
         - accessToken: []
@@ -49,7 +50,9 @@ paths:
       summary: Invalidates all access tokens for a user
       description: |-
         Invalidates all access tokens for a user, so that they can no longer be used for
-        authorization. This includes the access token that made this request. 
+        authorization. This includes the access token that made this request. All devices
+        for the user are also deleted. `Device keys <#device-keys>`_ for the device are
+        deleted alongside the device.
 
         This endpoint does not require UI authorization because UI authorization is
         designed to protect against attacks where the someone gets hold of a single access
diff --git a/changelogs/client_server/newsfragments/2028.clarification b/changelogs/client_server/newsfragments/2028.clarification
new file mode 100644
index 000000000..75e21e743
--- /dev/null
+++ b/changelogs/client_server/newsfragments/2028.clarification
@@ -0,0 +1 @@
+Clarify that devices are deleted upon logout.