Why this matters
Why is session duration important? Your client could still be logged in to their live site a couple of days after simply closing the browser tab. By auto ending administrator sessions you reduce the window of opportunity for nasty things to happen, like your client clicking on a malicious email link.
Client education is never an easy task, but this might help train them into using an editor level account for day to day content changes and leaving their (emergency use only) admin account alone.
What it does
ToggleWP’s session module has a great, and potentially frustrating feature – the ability to auto log out admin users after 1 hour. A notice is shown in the admin bar with the count down. As time runs out it turns amber and then red.
You can hover over the count down timer to see the “Extend session to 1 hour” option, which will reset your session back to an hour. Handy for those longer running admin tasks.
How to set it up
When logged in as the site’s administration user, head over to ToggleWP > Manage. Enable the “Session Management” option. Go to the new “Sessions” tab and enable the “Enable Session Expiration” setting.
From here you can also control the default duration (1 hour by default), and the admin bar countdown.
Tick this and save changes.
After enabling this you will need to log out and back in for it to take affect.
For sites with multiple admin users you may with to force a logout for them. This is quick to do from the Users screen. Tick the box next to Username to select them all, then select “Force Logout” from the bulk actions list and apply.
