Settings and activity
2 results found
-
1,099 votes
Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
If we detect there's been no activity on a page (e.g…An error occurred while saving the comment An error occurred while saving the comment
Bhavna Manilal
commented
Could the Practice Manager please be improved where it is not dependent on activity time as it logs out if there's been no activity after an hour. Previously Practice Manager did not log out, only HQ did and still does.
Thanks.
Bhavna Manilal
supported this idea
·
-
11 votes
Hey team, thanks for sharing your needs in preparing workpapers on Cash basis. We're happy to provide an update that this is now in development as part of new Xero Workpapers. With new Workpapers you'll be able to select the accounting basis (cash or accrual) when setting up a workpaper pack, ensuring your calculations and reports align perfectly with your client's needs.
We've just started roll out to Australia, and will be following to other regions in 2026. We understand that you're eager for this feature, and we'll keep you updated on the progress, here.
Bhavna Manilal
supported this idea
·
Could the Practice Manager please be improved where it is not dependent on activity time as it logs out if there's been no activity after an hour. Previously Practice Manager did not log out, only HQ did and still does.
Thanks.