We have grown noticeably accustomed to logging in or signing in to systems and websites in many places.
I know that many sites such as my bank (NetBank) logs me out as soon as I exit the page1; but many and more don't.
In an article which I recently read, the writer states:
This type of authentication maps very naturally to a web site, because users are used to “logging in” when they start working with a particular site and “logging out” when they are done.
But is this actually the case? Do users explicitly log out of sites when they are done?
I know I certainly don't; and I'm a Web/Software Developer2
- Please provide evidence and/or research as part of your answers (if possible).
- I ask this as I would like to know whether or not to base my UX design on users' behaviour to ensure their safety.
- Question is not relevant to non-safety-concerned sites where it doesn't matter if you stay logged in (StackExchange on home computer etc.).
- According to this answer on a similar question; many sites don't even prominently display the log-out/sign-out button.
- Another related question: How should a user exit an intranet web app with automatic login?
1. I think that it doesn't kill the session when I leave, but kills any sessions if they exist when I return, making it seem like it kills on page close. Either way, doesn't matter for our discussion.
2. Unless I'm at a public or work computer.