How long should remain an email session opened? Yahoo, Gmail, Hotmail. And what's the best practice to expire it?

I looked up for it but with no luck. Thanks!

  • Yahoo you can choose between 1 day or 2 weeks: help.yahoo.com/kb/SLN20351.html, Gmail IIRC never timeouts
    – Midas
    Commented Mar 3, 2016 at 12:42
  • 3 days to 2 weeks is a common practice. Commented Mar 3, 2016 at 21:40
  • This seems to be a question about either implementation or security. What the UX angle here? Commented Mar 4, 2016 at 12:07
  • 1
    @AndrewMartin, while what you say is true, there are obvious UX angles in users having open sessions, having to log in / out, usability for processes regarding security measures and so on. As it stands, it's quite off-topic-ish, but there are many UX concerns to this answer as well
    – Devin
    Commented Mar 4, 2016 at 15:26
  • The session expiration is a valid UX question. Even though it touches on other topics, it has a directly measurable user impact.
    – JohnGB
    Commented Mar 4, 2016 at 20:19

1 Answer 1


If data loss is the result of beeing logged out automatically, always make sure the user is aware of the expiration. For example my bank will remind you on every page that your session will expire in a few minutes. If the user may login any time and resume where he left, the expiration time is not much of a concern. Implement a "Keep me logged in" checkbox and keep the session open for as long as possible when ticked. This implicitly gives the user a hint that if he does not tick the checkbox, the session will expire when he leaves the page. Keep it open for a few days (3 days to 2 weeks, as stated in the comments).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.