diff --git a/addons/auth_totp/models/res_users.py b/addons/auth_totp/models/res_users.py
index 855a92e0f35..06aad891550 100644
--- a/addons/auth_totp/models/res_users.py
+++ b/addons/auth_totp/models/res_users.py
@@ -68,6 +68,7 @@ class Users(models.Model):
 
         self.sudo().totp_secret = secret
         if request:
+            self.flush()
             # update session token so the user does not get logged out (cache cleared by change)
             new_token = self.env.user._compute_session_token(request.session.sid)
             request.session.session_token = new_token
@@ -83,6 +84,7 @@ class Users(models.Model):
 
         self.sudo().write({'totp_secret': False})
         if request and self == self.env.user:
+            self.flush()
             # update session token so the user does not get logged out (cache cleared by change)
             new_token = self.env.user._compute_session_token(request.session.sid)
             request.session.session_token = new_token