Accessed from the Sessions tab, Session Management can enforce automatic session expiration for your admin user accounts. This prevents admins from closing a tab and leaving a session open for days, which decreases the risk of session stealing and malicious links containing cross site scripting attacks from working.
The default “Admin Session Duration” is 1 hour (3600 seconds). This can be manually extended via the admin bar when “Show Admin Bar Countdown” is enabled.
“Enable Force Logout” will add an extra action to the Users screen, when a user is hovered. This allows instant session termination in case of an emergency, or simply to log out other admins before major site maintenance takes place.
