What is session length and timeout?
Session length determines how long a user can stay signed in before being automatically logged out/ timed out due to inactivity. This is an important security measure that helps protect sensitive information, including electronic protected health information, personal data, and other confidential records.
Enforcing session timeouts ensures that organisations maintain strong access control and data protection standards.
This guide covers:
How to set up session length in splose
Available session timeout options
Automatic timeout
Benefits of setting a session timeout for the workspace
This feature can only be accessed and configured by users with access to the Security settings page.
How to set up session length in splose ⚙️
Go to Settings - Click Settings in the top-right corner of your splose dashboard.
Select Security - In the left-hand menu, click Security.
Adjust the session length - Under Session length, choose your preferred duration from the dropdown menu.
Save changes - Click Save in the top-right corner to apply your settings.
Available session length options ⏳
You can set session length to:
30 minutes
1 hour
3 hours
6 hours
12 hours
24 hours
7 days (default)
If your organisation requires stricter security settings for compliance, adjust your session length settings accordingly to ensure users are periodically re-authenticated.
Automatic timeout 📌
If your session length has been set up for 7 days for example and you're regularly active on splose, you will not be logged out and your session will extend.
The maximum session time is 3 months, after which you will be logged out and prompted to log in again.
Benefits of session timeout for your workspace ✨
Improves security: Reduces the risk of unauthorised access if a device is left unattended.
Protects client data: Ensures sensitive information is not accessible after a period of inactivity.
Enhances compliance: Helps meet industry security standards by enforcing periodic re-authentication.
Reduces session hijacking risks: Prevents malicious access if a session remains open too long.
Configurable security policies: You can enforce stricter session timeout policies based on your industry requirements.
Setting an appropriate session length helps maintain security while balancing user convenience in splose.