---
title: "Sign-in & session (automatic sign-out)"
description: "Sign-in & session (automatic sign-out)"
---

Novro signs users out automatically in two ways, so a forgotten browser does not stay signed in.

**Sign-out after inactivity.** If there is no activity (clicks, key presses, scrolling) for the set time, you are signed out. Two minutes before, a notice says "You will be signed out in 2 minutes because of inactivity" with a **Stay signed in** button. All tabs share one clock: working in one tab keeps the others signed in, and signing out in one tab signs out all of them. The default is 60 minutes.

**Maximum session length.** Regardless of activity, you must sign in again once the set time has passed since you signed in. The server checks this on every request, so it cannot be bypassed in the browser, and switching organization does not extend the session. When the time is up, the sign-in page says "Your session has expired". The default is 12 hours.

**Change the times (admin).** Open Settings ▸ Company settings ▸ the **Sign-in & session** tab. Inactivity can be 15–480 minutes and session length 1–720 hours. The change applies to the whole organization and is recorded in the audit log. The session length applies within a minute, the inactivity time from the next sign-in or page load. If you lower the maximum session length you are asked to confirm first: everyone who has already been signed in for longer than the new limit is signed out on their next action, including you.

**Does not apply to:** the survey page (also kiosk mode) and the whistleblowing reporter pages. They are anonymous and have no sign-in. Keys for the public API and MCP have their own lifetimes and are not affected.