Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

There are many questions with similar titles, but I couldn't find any asking the same thing.

Most sites that support user login have a "remember me" functionality, where you can check a box and have your session persist through multiple browsing sessions.

Are there any standards or best practices or recommendations in terms of how long the session should last until it expires again? What about for how the expiration time is "refreshed" (e.g. if it expires in one month, should it be updated to one month away on every logged-in page view, or handled some other way)?

share|improve this question

migrated from stackoverflow.com Sep 19 '11 at 18:52

This question came from our site for professional and enthusiast programmers.

2 Answers 2

I don't think I've ever seen any significant standards around this. General-purpose sites like blogs and forums seem to mostly keep you logged in for about a week, though I suspect that's also due to not bothering to change the default setting in whatever application manages the site.

Beyond that, sites where security is more a cause for concern or money is involved do tend to keep much shorter sessions, or to break them up. Amazon, for example, seems to never log me out at least as far as browsing around and adding things to my cart. But once I try to actually start a purchase or view my account information I do get challenged to identify again.

share|improve this answer

I think it should be 30 days. Not too long, not too short, to facilitate the user's experience.

And I think upon setting the 30 day period, it shoudn't be updated, on any other login.

So it should be refreshed only when the user relogs with the "remember me" checkbox checked.

This is mainly up to you, there is not a rule, just what the users/customer(s) want.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.