# Session Timeout

**URL:** <https://meta.discourse.org/t/session-timeout/34686>\
**Category:** Data & reporting\
**Created:** [October 19, 2015, 7:26pm UTC](https://meta.discourse.org/t/session-timeout/34686 "2015-10-19T19:26:35Z")\
**Posts on this page:** 1\
**Showing post:** 54

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [September 11, 2020, 5:15am UTC](https://meta.discourse.org/t/session-timeout/34686/54 "2020-09-11T05:15:51Z")

</div>

This is now done as a per site setting.

[https://review.discourse.org/t/feature-add-support-for-not-persistent-sessions/15171](https://review.discourse.org/t/feature-add-support-for-not-persistent-sessions/15171)

Feels to me like an admin choice really. It is a security feature. Long term we may consider an allow list of IP addresses that bypass the limitation (so for example computers in the corporate network stay logged in, computers out get auto logged out)

---

_[View the full topic](https://meta.discourse.org/t/session-timeout/34686)._