Skip to main content

Auto Logout Overview

K
Written by Karthek S

Overview

AutoLogout signs users out of Right-Hand Cybersecurity a set time after they sign in, even if they are still working. This keeps accounts secure: if a device is left unattended, access doesn't continue indefinitely, and signing in again confirms the right person is using the account.

Fifteen minutes before a session ends, users see a countdown. They can choose Stay signed in to sign in again and keep working. If they are signed out, they see a clear reason why.

Note: This update doesn't change how long sessions last. Your organization's session settings stay as they are, and there is nothing to reconfigure.

Prerequisites

  • To change the session length, you need administrator access to the Right-Hand Cybersecurity admin portal.

  • No setup is required for employees. The countdown appears automatically.


How AutoLogout works

  • The session length is counted from sign-in. Working doesn't extend it, and being idle doesn't shorten it.

  • The session length can be between 20 minutes and 7 days.

  • When Enable Auto Logout is off, sessions last 8 hours.

  • New organizations start with AutoLogout on, set to 8 hours.

  • A new session length takes effect from each user's next sign-in. Sessions already running keep their original end time.

  • All of a user's open tabs share one session, so they end at the same time.


Step-by-Step Instructions

Step 1 - Open the security settings

In the admin portal, go to Settings › Company › Security.

Step 2 - Turn on AutoLogout

Turn on Enable Auto Logout.

Step 3 - Set the session length

Enter the session length in hours and minutes. Choose a value between 20 minutes and 7 days.

Step 4 - Save your changes

Select Update.

Important: If your current session length is under 20 minutes, it keeps working as it is. The next time you save the security settings, you need to choose 20 minutes or more.


What employees see

The countdown

Fifteen minutes before a session ends, a yellow bar appears at the top of the page:

You're reaching the maximum session length! - you'll be signed out in 14:59

Save your work! Anything unsaved will be lost.

The bar shows a live countdown and a Stay signed in button. It can't be closed, but it doesn't block work.

The countdown appears on every signed-in page of the admin portal and the employee portal, and in Human Risk Management, Automations, and Agents. It doesn't appear inside premium (SCORM) courses.

Stay signed in

When you select Stay signed in, Right-Hand Cybersecurity asks you to sign in again using the same method as before: password, one-time code, Google or Microsoft social login, or your organization's single sign-on (SSO).

When you finish signing in with the same account:

  • You return to the page you were on.

  • You get a fresh session, and your other open tabs get it too.

Important: Selecting the button alone doesn't renew your session. You must complete the sign-in. If you use SSO, you sign in at your identity provider again, even if your identity provider session is still active.

A failed sign-in attempt, such as a wrong password, doesn't sign you out. You can keep working until the countdown ends.

Warning: Signing in again doesn't save your work. Anything unsaved, including changes to settings and templates, is lost. Save everything before you sign in again.

Not now – return where I left off

This option takes you back to your page without signing in. The countdown keeps running.

When the session ends

When the countdown reaches zero, you are signed out in every open tab. The sign-in page shows: "You were signed out as your maximum session length was reached." After you sign in again, you start on your usual home page.

If you opened Right-Hand Cybersecurity from an email link

If you opened the platform from a link in a training or assessment email, you may not have a password. In that case, you see Send me a new link when you select Stay signed in or when your session ends.

  1. Select Send me a new link.

  2. Open the newest email from Right-Hand Cybersecurity, titled "Your new access link is ready," and select the link inside it.

  3. If you see Continue to the portal, select it.

You can request a new link once every 60 seconds. Each link works only once and expires after 24 hours, unless your organization has set a different limit.

Training

  • Progress in premium (SCORM) courses is saved and isn't interrupted when a session ends.

  • Some training pages show the countdown but no Stay signed in button. When the time runs out, open your newest training email to continue.


Validation

To confirm AutoLogout is working as expected:

  1. Go to Settings › Company › Security and check that Enable Auto Logout shows the session length you set.

  2. Sign out and sign in again. The new session length applies from this sign-in.

  3. Open Audit Logs to confirm the setting change was recorded. Audit Logs also record when each session ends and why.


Troubleshooting

Q1. The countdown is still there after I selected Stay signed in. You need to finish signing in. If you chose Not now or left the sign-in page, your original countdown keeps running.

Q2. I landed on the home page instead of the page I was on. This happens if your session ended before you finished signing in, or if you signed in with a different account. Use the menu to go back to your page.

Q3. My unsaved changes are gone. Unsaved work can't be restored after a session ends. Save your work as soon as you see the countdown.

Q4. My other tabs were signed out too. All your tabs share one session, so they end at the same time. Sign in once, then reopen the pages you need.

Q5. I can't save a session length under 20 minutes. The minimum session length is 20 minutes. Choose 20 minutes or more.


Best Practices

  • Save your work as soon as the countdown appears.

  • Use Stay signed in before the countdown ends to return to the same page.

  • Let employees know about the countdown in advance, especially if you use a short session length.

  • Review Audit Logs to track session endings and changes to the AutoLogout setting.


FAQs

For administrators

Q1. What is AutoLogout?

Ans AutoLogout ends each user's session a set time after they sign in, even if they are still working. Signing in again starts a new session. Capping session length stops access from continuing indefinitely, for example on a device left unattended.

Q2. What does this update change?

Ans Users now see a countdown 15 minutes before their session ends, can choose Stay signed in to sign in again and keep working, and see a clear reason when they are signed out. How long sessions last doesn't change.

Q3. Do I need to change anything?

Ans No. Your organization's session settings stay as they are, and there is nothing to reconfigure.

Q4. Where is the setting?

Ans Go to Settings › Company › Security › Enable Auto Logout. Enter the session length in hours and minutes.

Q5. What are the limits?

Ans At least 20 minutes and at most 7 days. When the setting is off, sessions last 8 hours. New organizations start with it on, at 8 hours.

Q6. We use a session length under 20 minutes today. What happens?

Ans It keeps working as it is. The next time you save the security settings, you need to choose at least 20 minutes.
​

Q7. Does AutoLogout sign out inactive users?

Ans No. The session length is counted from sign-in. Working doesn't extend it, and being idle doesn't shorten it.

Q8. When does a new session length take effect?

Ans From each user's next sign-in. Sessions already running keep their original end time.

Q9. Will users lose unsaved work?

Ans Yes. Anything unsaved when the session ends is lost, and signing in again doesn't restore it. The countdown reminds users to save first.

Q10. Where do users see the countdown?

Ans On every signed-in page of the admin portal and the employee portal, and in Human Risk Management, Automations, and Agents. It doesn't appear inside premium (SCORM) courses, and training progress isn't affected when a session ends.

Q11. Can users hide the countdown?

Ans No. It stays at the top of the page until they sign in again or the session ends, but it doesn't block their work.

Q12. How does it work with single sign-on?

Ans When users choose Stay signed in, they sign in at your identity provider again, even if their identity provider session is still active.

Q13. We send users to our own sign-in page. What happens?

Ans When users choose Stay signed in, they sign in again on your sign-in page, whatever method they used before.

Q14. Can we see when people were signed out?

Ans Yes. Audit Logs record when a session ends and why, and any change to the AutoLogout setting.


For employees

Q1. Why am I seeing "You're reaching the maximum session length"?

Ans For security, your organization limits how long you can stay signed in. The message means that time is nearly up. It doesn't mean you've done anything wrong or that something is wrong with your account.

Q2. I'm in the middle of something. Why is my session ending?

Ans The limit counts from when you signed in, so it can be reached while you are using the platform.

Q3. How much time do I have?

Ans The countdown shows the time left. It appears 15 minutes before your session ends.

Q4. What should I do first?

Ans Save anything you are working on. Signing in again won't keep unsaved changes.

Q5. What does Stay signed in do?

Ans It takes you to sign in again using the same method as before. When you finish signing in with the same account, you return to the page you were on with a fresh session. Selecting the button alone doesn't renew your session; you need to complete the sign-in.

Q6. What does "Not now – return where I left off" do?

Ans It takes you back to your page without renewing your session, so the countdown keeps running.

Q7. I typed the wrong password. Will I be signed out?

Ans No. A failed attempt doesn't end your session; only the countdown does. You can try again or choose Not now.

Q8. I opened the platform from a link in an email. How do I continue?

Ans Where Send me a new link is shown, select it and use the new link from your email. You won't be asked for a password.

Q9. I asked for a new link, but nothing arrived.

Ans Check your spam or junk folder. You can request another link every 60 seconds. If it still doesn't arrive, contact your administrator.

Q10. The link in my email says it has expired.

Ans Each link works once and expires after 24 hours, unless your organization has set a different limit. Open the newest link in your inbox, or contact your administrator.

Q11. I see "This link belongs to someone else."

Ans The link was sent to another person. Open the link from your own email.

Q12. There's a countdown but no Stay signed in button.

Ans Some sessions, such as some opened directly from a training email, show only the countdown. Save your work now. When the countdown ends, follow the instructions on screen; they may direct you back to your original training email.

Q13. What happens when the countdown reaches zero?

Ans You are signed out in every open tab and see a message explaining why. Follow the instructions shown to sign back in.

Q14. Where will I land after signing back in?

Ans If you used Stay signed in before the countdown ended, you return to the page you were on. If your session had already ended, you start from your usual home page.

Q15. I signed back in with a different account. Why am I on the home page?

Ans Returning to your previous page only works when you sign in with the same account. A different account always starts fresh.

Q16. What happens to my training?

Ans Progress in premium (SCORM) courses is saved and isn't interrupted. For other training, sign back in and open the training again to continue.

Q17. Do I need to remember all of this?

Ans No. Watch for the countdown, save your work, and follow the guidance shown for your session.

Did this answer your question?