Settings and activity
4 results found
-
1,067 votes
Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
If we detect there's been no activity on a page (e.g…John Harris supported this idea ·
-
30 votes
John Harris supported this idea ·
-
349 votes
Hey everyone👋 Thanks so much for sharing all your feedback and keeping the conversation going here. We've been following along and considering changes around the process for adding payments in new invoicing.
As we mentioned in our last update, while we won’t be bringing classic invoicing back, we're taking a close look at what made it work so well for you. The ability to quickly enter payment information without leaving the invoice is a key part of that.
To address this, our product team is now working to reintroduce this functionality to the invoice page.
We can’t share a timeline just yet, but we want you to know that your comments have been a vital part of this process. We’ll be sure to post an update here as soon as we have more to share.🙂
John Harris supported this idea ·
-
9 votes
John Harris supported this idea ·