Settings and activity
2 results found
-
1,091 votes
Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
If we detect there's been no activity on a page (e.g…
Support Team
supported this idea
·
An error occurred while saving the comment -
11 votes
An error occurred while saving the comment Support Team
commented
The invoices provided in our Hubdoc account do not contain all accounts for all clients on our console as some are included with a Xero subscription and/or comped. Would it be possible to have them included on the invoice at a $0 cost?
Support Team
supported this idea
·
When working with multiple clients and applications, users are being logged out too quickly. Please consider adding a feature to allow console owners to adjust this time out at the console level for the entire organization.