Login - Don't Log Me Out/Extend Log Out Time (more than 60 minutes)
Develop the feature where Xero doesn't log user out time is extended for more than 60 minutes when it’s idle.
Purpose: Because having to log in again can disrupt users' workflow, which some users had to be interrupted as they’re also taking care of their business at the same time.
Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
If we detect there's been no activity on a page (e.g move movements, clicks, keyboard) for 10 minutes you'll receive an inactivity prompt ('Hey Kelly, are you still there?') and if your session reaches 60 minutes you'll be redirected to the login page.
- As a suggestion you can periodically refresh the screen <F5> to prevent the security timeout kicking in.
In more recent comments here it sounds like some of you are having issues with the login process or staying logged into Xero for less than 60 minutes. If you're experiencing unexpected behaviour, we'd highly recommend raising a case with our team of specialists at Xero Support where we have tools to investigate and confirm what's going on - Any details you can provide the team on the page you're trying to sign in from (e.g URL, error 500 received) or actions you were making when the login issue occurred will help. Thanks
-
John Williams commented
Please don't take me anywhere but to my own data. I am trying to learn and this is stuff I simply don't want to know about at this stage
-
Damian Tehan commented
Not what I want to see when I log in
-
David Crump commented
Not what I want to see when I log in
-
Carol Wald commented
Yes I would agree with this.
-
David Hamilton commented
Stop wasting my time, where is my Dashboard..very poor by you
-
Craig Cooper commented
Where is the Dashboard?
-
Casey Spanner commented
no comment needed
-
Grant McMillan commented
This is seriously annoying. Where is My Dashboard????
-
Paula Robinson commented
YES I'M SICK OF THIS NOTICE EVERYTIME i LOGGIN!!!!!!!!!!!!
i JUST WANT TO GET TO MY DASHBOARD
-
Russell Cooper commented
Dont like this entry
-
Paula Edwards commented
No comment
-
Jo Cannon commented
YES I'M SICK OF THIS NOTICE EVERYTIME i LOGGIN!!!!!!!!!!!!
i JUST WANT TO GET TO MY DASHBOARD
-
Brigitta Sinton commented
no comment
-
Mark O'brien commented
no comment
-
Julianne Oldman commented
stay as it is now
-
Kym Lake commented
Log outs are great safety feature. Should remain.
-
Angus Maclean commented
why change something that was working fine
-
Wayne Gibbons commented
nil
-
Malcolm Proctor commented
I don't like it
-
Alan Gray commented
Rubbish