Settings and activity

2 results found

1. Login - Don't Log Me Out/Extend Log Out Time (more than 60 minutes)

   1,064 votes

   vote vote vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   vote

   We’ll send you updates on this idea

   403 comments  ·  For small businesses » Settings & user roles  ·  delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Not in pipeline  ·  AdminKelly Munro (Community Manager, Xero) responded

   Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
   Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
   If we detect there's been no activity on a page (e.g move movements, clicks, keyboard) for 10 minutes you'll receive an inactivity prompt ('Hey Kelly, are you still there?') and if your session reaches 60 minutes you'll be redirected to the login page. 

   • As a suggestion you can periodically refresh the screen <F5> to prevent the security timeout kicking in.

   In more recent comments here it sounds like some of you are having issues with the login process or staying logged into Xero for less than 60 minutes. If you're experiencing unexpected behaviour, we'd highly recommend raising a case with our team of specialists at Xero Support where we have tools to investigate and confirm what's going on - Any details you can provide the team on the page you're trying to sign in from (e.g URL, error 500 received) or actions you were making when the login issue occurred will help. Thanks

   Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
   Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
   If we detect there's been no activity on a page (e.g… more

   Rebecca Phillips supported this idea  ·  30 January, 2024

2. Global Search - Search items by Description

   137 votes

   vote vote vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   vote

   We’ll send you updates on this idea

   71 comments  ·  For small businesses » Accounting features  ·  delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   submitted  ·  AdminKelly Munro (Community Manager, Xero) responded

   Appreciate the interest in being able to search by description. While we're attentive to your feedback, I want to be open that we don't have any immediate plans for developing this atm. 

   We're staying close to feedback on how we can improve navigation for our customers when using Xero, and I'll let you know if there is any development planned surrounding this, here. Thanks 

   An error occurred while saving the comment
   Rebecca Phillips commented  ·  09 August, 2023  ·  Edit…  ·  delete…

   I can't understand why the description field is not automatically searchable. This extremely basic function was an assumption I made in switching recently to XERO - never thought to double-check this was available in XERO before moving our entire accounting system.

   We regularly have to search back for information in the description field. The 'workaround' is not reliable - yesterday the system did not search the description field correctly and was unable to find an entry we were looking for despite it clearly being there (and subsequently found another way). It found 3 entries with the term in it but not the 4th. Super FRUSTRATING. UPDATE EDIT: Despite being dated in this search period, I think this 4th transaction is hidden somehow from search because it was imported/recreated from our previous accounting system by the accountant. I really hope this assumption is correct.

   Regardless, the concern regarding the difficulty/complexity re the workaround in searching the description field remains. (Accounting/Account Transactions/Filter for Description field + search for term).

   Save Submitting...
   Rebecca Phillips supported this idea  ·  09 August, 2023