Enter your idea

Was this "idea" was posted by the Xero Team on Sep 6, 2013.. I can see comments from 2+ years ago. If so, we are more than 10 years on and still nuffin! I think we are wasting our time contributing to this thread.

I would hope most sensible adults, would choose to log out if they are not monitoring Xero for a long period. Otherwise it is a pain to keep logging back in when you are sitting in front of your PC working

At the moment it does time out too soon

I understand the reason given by Xero was sensitive data*, so how about something easier like a 4 digit pin?

*lots of people use computers in secure locations that no-one unauthorised access to, bit of a stupid reason to take everyone's ability to choose away.

Would greatly appreciate more flexibility with extending the LogOut times - see below for all the reasons why. Understand if busy environment but I work from home, on my own, and want to use Xero throughout the day and still have to log on regularly throughout the day. Please look into this for your community.

please have option to extend log in time

This needs to be fixed unfortunatley xero tech are not very good and don't know or care on a resolution for this constant customer complaint.The CEO of xero just wants them signed up and after that the tech's all told to ignore this constant request. as xero don't know how to fix it.

Highly dispruptive - especially for those of us who work with multiple tabs open for efficiency. And especially unnecessary for those of us who work at our own computer in a secure office. Please offer more choice around this and less nannying!!

Absurd that Xero don't listen to their customers! 10 years on, this "feature" is still imposed on their paying customers.

As a work-around, this chrome extension allows you to auto refresh xero pages, so the re-login timeout doesn't happen.

Auto Refresh Plus

https://chrome.google.com/webstore/detail/auto-refresh-plus-page-mo/hgeljhfekpckiiplhkigfehkdpldcggm

Looks like from the comments below that I'm not the only person complaining about having to log in many times a day.

Please extend the time from 60mins. It is very annoying having to keep logging in.

come on Xero - it is time to fix this! or you just don't care about your users.

Its utterly infuriating but Xero will not action anything - requirements and suggestions just sit idly here for years with no action. This request is 10 years old FFS!

Actually we are issued individual laptop and it is already with password /fingerprint unlock and auto lock after inactive 30min (i will also auto lock once i going to left my work desk for slightly longer time). I think most website will also prompt and click to stay login instead of requesting us to manual key the password again. What is the point in requesting for us to manual key in the password when we already saved the password inside the laptop for easy login? I close the xero tab and reopen and it is auto login so why request for us to manual type password?

I think the user or business should be able to choose this level of security and not have it imposed on them. If they are aware of the risks, they should be able to still choose to keep logged in.

Agree with comments. Logging out after one hour is disruptive as we use Xero to create invoices for sales and these often have intervals greater than one hour.

++ this

I'm afraid that fixing the session automatic expiry to 60 minutes is a very unsatisfactory decision by your product team. Incredible to see that these complaints have been going for years and are still not addressed.

It is incorrect to assume that every user of Xero has exactly the same security requirements. For example I only use it at home as a single user, where no one else has access to the computer, so it's plenty secure even if it stays logged in for days. In contrast, in an open office then of course security is a much more sensitive concern.

Why do you think that gmail lets people stay logged in for days or even weeks? And email is far more sensitive than an accounting platform, because (unless two factor authentication is used) any attacker can click a "Forgot password" button and then a recovery link is sent to the owner's email account which can let the attacker into the recovered account.

It should be up to users to decide what level of security they need, rather than a blanket decision by a product team. By all means impose a maximum session length of a week if you must, but 1 hour is ridiculous.

I dont remember this being an issue a few years ago but not with multi organisations on a single login it is even more frustrating. Each time get logged out due to "inactivity" i need to then go and navigate back to where it kicked me out from. at least let us log back into the same screen.

I find this extremely frustrating - especially if I have several windows open at the same time.

Why is it that Xero does not have an option for those to decide an appropriate time. Alternatively, where the above is NOT possible - Xero desperately needs to extend this out to a minimum 6 hours in my opinion. If anyone is actually worried about their account security where someone physically may access their portal, they can close their own window themselves and choose not to save their password in their browser. Xero you need to change this desperately