Take the 2-minute tour ×  My company has created lots of
computer software but one issue we have is with login timeouts.
Some developers want to make them shorter for security, while
most users want it be infinite? Is there ever a justification to
have no login timeout? How short is too short?  share|improve
this question A lot of the annoyance of login timeouts can be
mitigated by remembering (hashed) passwords, web apps are
especially good at this since browsers do it for you, but that
may not help in your situation. –  Ben Brocka Sep 22 '11 at
13:58 In my opinion an open tab/or page should not timeout.
After the user leaves the page it can immediatly timeout. – 
Barfieldmv Sep 22 '11 at 14:51 add comment  4 Answers  up vote 8
down vote accepted  The length of the time out is partly
dependent on the sensitivity of the data and security of the
application.  For something like a banking site the time out
needs to be quite short so that there is very little chance of
someone getting access to the account if t