Setting session timeout for users

<body>
<p id="docs-hc-snippet" style="display: none;">Like most applications, Zendesk implements a session expiration to enhance security. Signing users out after a period of inactivity reduces the risk of unauthorized access. Admins can customize the session expiration time.</p>
<div class="article-banners">
<div id="docs-wmp-link">
<a href="https://support.zendesk.com/hc/en-us/articles/5411234991258-plan" rel="noopener" target="_blank">What's my plan?</a>
</div>

<div class="article-banner" id="suite_all">
<table>
<tbody>
<tr>
<td>
<strong>All Suites</strong>
</td>
<td>Team, Growth, Professional, Enterprise, or Enterprise Plus</td>
</tr>
</tbody>
</table>
</div>

<div class="article-banner" id="support_all">
<table>
<tbody>
<tr>
<td>
<strong>Support</strong>
</td>
<td>Team, Professional, or Enterprise</td>
</tr>
</tbody>
</table>
</div>

</div>
<div id="docs-ai-summary">
<p id="docs-ai-summary-toggle">Summary: <span id="up-triangle">◀</span><span id="down-triangle">▼</span></p>
<p id="docs-ai-summary-content">You can set inactivity session time-out and maximum session duration to protect accounts by signing users out after inactivity. Admins can choose separate session settings for team members and end users, with defaults of 60 minutes for agents and eight hours for end users. Shorter session timeout periods reduce the risk of unauthorized access and session takeover.</p>
</div>

<div class="body">

<div class="note fastpath" id="ac_session_time__note_mwx_cty_kbc">
<span class="fastpathtitle">Location: </span> <span class="ph">Admin Center &gt; Account &gt; Security &gt;
Advanced</span>
</div>
<p class="p">Like most applications, Zendesk implements a session expiration to enhance security.
Signing users out after a period of inactivity reduces the risk of unauthorized access.
Admins can customize the session expiration time.</p>
<p class="p">Zendesk recommends setting the shortest duration possible for your organization. Ideally,
use the default settings, 60 minutes for agents and eight hours for end users, or set
shorter sessions, if possible. Shorter session expiration windows reduce the amount of
time for a potential session takeover, but does require users to reauthenticate more
often.</p>
<div class="p">This article includes the following topics:<ul class="ul" id="ac_session_time__ul_qzq_wry_kbc">
<li class="li"><a class="xref" href="#topic_oky_wry_kbc">Understanding Zendesk session time</a></li>
<li class="li"><a class="xref" href="#topic_i25_yry_kbc">Customizing the inactivity session time-out period</a></li>
</ul>
</div>
</div>
<div aria-labelledby="ariaid-title2" class="topic nested1" id="topic_oky_wry_kbc">
<h2 class="title topictitle2" id="ariaid-title2">Understanding Zendesk session time</h2>
<div class="body">
<div class="note attention" id="topic_oky_wry_kbc__note_qhx_3vt_djc">
<span class="attentiontitle"></span> To help protect your account, Zendesk is
currently rolling out a 12-hour maximum session duration limit for team members. See
the <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/10660008447386" target="_blank">announcement</a> for details.</div>
<p class="p">When users sign in to Zendesk, their session remains valid as long as user activity
occurs, unless the user explicitly signs out of Zendesk. By default, a session
expires after 60 minutes of inactivity for agents and after eight hours of
inactivity for end users.</p>
<ul class="ul" id="topic_oky_wry_kbc__ul_tnf_msy_kbc">
<li class="li">
<strong class="ph b">User activity</strong> is when you click something explicitly in the Zendesk user
interface or when the application pulls information automatically in the
background. Information pulls often happen to keep the Zendesk interface up to
date, but pulls don't occur uniformly across all Zendesk pages.</li>
<li class="li">
<strong class="ph b">Session expiration countdown</strong> starts when you close your browser or quit
the browser tab where the Zendesk session is running. The countdown can also be
triggered when you put your computer to sleep or turn it off. When the session
expiration limit is reached, Zendesk terminates your sign-in session, and you
have to sign in again to use Zendesk.</li>
</ul>
<p class="p">If Zendesk detects suspicious activity, users may be signed out and redirected to the
sign-in page. After signing in again, they’ll be returned to where they left
off.</p>
<div class="p">
<div class="note">
<span class="notetitle">Note:</span> The inactivity session time-out settings described in this article don't
affect <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/5133523363226" target="_blank">unified agent statuses</a>.
</div>
</div>
</div>
</div>
<div aria-labelledby="ariaid-title3" class="topic nested1" id="topic_i25_yry_kbc">
<h2 class="title topictitle2" id="ariaid-title3">Customizing the inactivity session time-out period</h2>
<div class="body">
<p class="p">Admins can customize the session expiration period. If your security requirements
differ for team members and end users, you can set separate expiration periods for
each.</p>
<p class="p">By default, agents are signed out after 60 minutes, and end users are signed out
after eight hours. Zendesk recommends setting the shortest duration possible for
your organization.</p>
<p class="p"><strong class="ph b">To set an inactivity session time-out period</strong></p>
<ol class="ol" id="topic_i25_yry_kbc__ol_x3j_wkv_gfb">
<li class="li"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" id="topic_i25_yry_kbc__d9e399" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_account_icon.png">
<strong class="ph b">Account</strong> in the sidebar, then select <strong class="ph b">Security &gt; Advanced</strong>.</span></li>
<li class="li">Click the <strong class="ph b">Authentication</strong> tab.</li>
<li class="li">Select a timeframe for <strong class="ph b">Team member session inactivity</strong> and <strong class="ph b">End user
session inactivity</strong>. </li>
<li class="li">Select <strong class="ph b">Maximum session duration</strong> to enforce a maximum session duration for
team members, then select the duration from the drop-down list. <p class="p">This setting
sets the maximum amount of time a team member can remain signed in. For
example, if the duration is set to 8 hours, the team member is signed out
after 8 hours of activity and will need to sign back in to
Zendesk.</p>
<p class="p">Team members receive a notification in the top right corner
of their screen five minutes before they are signed out of
Zendesk.</p>
<p class="p">When you turn on <strong class="ph b">Maximum session duration</strong>, you can't
turn it off, but you can adjust the duration. </p>
</li>
<li class="li">Click <strong class="ph b">Save</strong>.</li>
</ol>
</div>
</div>
<script id="docs-schema-markup" type="application/ld+json">{
"@context": "https://schema.org",
"@type": "TechArticle",
"@id": "https://support.zendesk.com/hc/en-us/articles/4408832533274",
"url": "https://support.zendesk.com/hc/en-us/articles/4408832533274",
"headline": "Setting session timeout for users",
"description": "You can customize inactivity session timeouts, set separate durations for team members and end users, and enforce a maximum session duration for team members.",
"articleSection": "Securing your Zendesk account",
"datePublished": "2021-10-16T03:47:07+00:00",
"dateModified": "2026-08-20T13:10:01.777836+00:00",
"inLanguage": "en",
"mainEntityOfPage": {
"@type": "WebPage",
"@id": "https://support.zendesk.com/hc/en-us/articles/4408832533274"
},
"author": {
"@type": "Organization",
"name": "Zendesk",
"@id": "https://www.zendesk.com"
},
"publisher": {
"@type": "Organization",
"name": "Zendesk",
"@id": "https://www.zendesk.com"
},
"isPartOf": {
"@type": "WebSite",
"name": "Zendesk Help",
"@id": "https://support.zendesk.com/hc/"
},
"about": {
"@type": "SoftwareApplication",
"name": "Zendesk",
"@id": "https://www.zendesk.com",
"softwareAddOn": {
"@type": "SoftwareApplication",
"name": "Security",
"@id": "https://support.zendesk.com/hc/en-us/sections/9641715451034"
}
}
}</script><script id="fast-path-script">
//<![CDATA[
const fast_path_style = document.createElement('style');
fast_path_style.innerHTML = `#article-body .fastpath{font-size:.9em;background-color:#f3f3f3;border:1px solid #d3d3d3;padding:10px 10px 8px;margin-bottom:16px}#article-body .fastpath::before{content:none!important}`;
document.head.appendChild(fast_path_style);
//]]>
</script><script id="ai-summary-script">
//<![CDATA[
const ai_summary_style = document.createElement('style');
ai_summary_style.innerHTML = `#styled-article-body{padding:0 0 0}#article-body #docs-ai-summary{background-color:#f3f3f3;border:1px solid #d3d3d3;padding:10px 10px 6px;margin-bottom:16px}#article-body #docs-ai-summary #docs-ai-summary-toggle{font-size:.9em;font-weight:700;margin-bottom:4px;cursor:pointer;display:flex;justify-content:space-between;align-items:center}#article-body #docs-ai-summary #docs-ai-summary-toggle #up-triangle{margin-left:auto;padding-right:10px;display:none}#article-body #docs-ai-summary #docs-ai-summary-toggle #down-triangle{margin-left:auto;padding-right:10px}#article-body #docs-ai-summary #docs-ai-summary-content{font-size:.9em;padding-left:25px;padding-right:25px;margin-bottom:12px}`;
document.head.appendChild(ai_summary_style);

const toggleAISummary = () => {
const summary = document.getElementById("docs-ai-summary-content");
const upTriangle = document.getElementById("up-triangle");
const downTriangle = document.getElementById("down-triangle");
if (summary.style.display === "none") {
summary.style.display = "block";
upTriangle.style.display = "none";
downTriangle.style.display = "inline";
} else {
summary.style.display = "none";
upTriangle.style.display = "inline";
downTriangle.style.display = "none";
}
};

document.getElementById("docs-ai-summary-toggle").addEventListener("click", toggleAISummary);
//]]>
</script>
</body>