An active session should be active as long as the user is active, it does not make sense to keep a session active if the user is not active. At least not for us. We do not understand why.

I want to automatic delete mail that's over 30 days in my trashcan!

How is this not a thing? We need an option for this !

I agree and I don't like it. Surely it reduces the secure aspect.

I loved the fact that i was logged out automatically before 4.0.0 but now i am logged in at all times even when exiting the page and i cant find a option to logout automatically after the window is closed to please add the feature back as a option

in the upgraded Protonmail one notable feature that seems to be missing is the auto-logout that used to happen whenever the browser window was closed on the mail web app. While this was a little inconvenient, it did provide an important level of security. Now you changed the auto-logout to 60 days, which means if someone gets hold of my laptop, they can access my account if they have my laptop's password. Can you please add a logout timer? Just let the user pick a number of hours, and if those hours pass after the last activity, the system logs them out (Lastpass uses that feature as well).

Being able to set a custom session timeout would be extremely valuable for me. I´m involved in work where a major security risk is physical seizure of phones / laptops etc by hostile actors. The phones are quite robust against unauthorised access but the laptops are often a problem. I can attempt to remember to log out each time of course but am likely to forget once in a while, and may not have time to do anything in some circumstances.

If I could set a custom inactivity timeout, or choose from various options, I´d probably go for 10 minutes to an hour, not 60 days! (60 days to me is a very large hole in the fence, so to speak...)

Hope that makes sense, thanks for all the hard work!

This feature already exists in the old Protonmail,
When I logged out, the session was ended, too.
This was possible to change in the security settings.
The feature seems to be forgotten to be implemented in the new Protonmail.

Can you explain your reluctance for implementing these basic security features?

6 months before auto logout? It's insane !!!
No auto-empty trash? Are we still in the 90's?

Also, can you dial down the HK retoric. I don't want China targeting the users of Protonmail and VPN. You're not political when it comes to Israel and Palestine, so why HK? The palestinians want the same rights as the people in HK, so why is only those in HK worthy of your attention and support?

I've open an account with you for security and privacy reasons, and your high political profile runs counter to your stated main objectives: providing security and privacy.

"On a related note, we have also had people ask us about ProtonMail’s official position regarding the ongoing Palestinian-Israeli conflict and whether working with an Israeli company means we are taking sides in this conflict. The answer is NO. As a Swiss company, we adhere to a policy of strict neutrality. The only position we take is that security and privacy are fundamental human rights which should be guaranteed for all."

https://protonmail.com/support/knowledge-base/protonmail-israel-radware/

https://protonvpn.com/blog/hongkong/

After predetermined periods of inactivity such as 5,10,15 min up to a few hours, the account will simply logout itself, and require user to sign back in.
This is supposedly the most secure and private email yet such a simple ability does not exist, I wonder..

Because what I use PM for is very confidential, It would be great (for me) to be able to set a time for auto logout so that others can't view an open web page if I leave my computer for a short period and forget to come back quickly.

I'm not sure if this would be included in this idea, but it would be great if existing sessions were limited to 48hours of inactivity. When I look at the list of my sessions theres pages of entires and there's even one from november 5 of last year. Existing sessions need to be auto purged where it makes sense.

Hi. Your paranoid users' auto-logouts are fine for them, bad for me -- if the page is open, I want it to stay open for a loooooong time. Can you please enable a setting for this? Let us decide our own inactivity logout times?

Thanks - Amy

please add auto logout if not in use for specific period of time
30 min 1 hour 2 hour etc
like in scryptmail

Please add auto-logout. I'm still logged in on laptop after the laptop has been in sleepmode for 4 days!! This is far from secure and almost unacceptable for this kind of secure/save mailservice. TIA

Yes, I really need an automatic timeout. By default, it should be a rather short interval, adjustable for longer or shorter duration by the user.

I, too, am very surprised this is not already offered. The rest of the service seems so focused on security, but security threats are not only online, they can be in your home or office.

I would definitely like to be able to set a time for inactive auto-logout in both web and mobile browser, like you can with the android mobile app. It's a very important security feature to me.

Very much yes. I don't consider this even an 'enhancement'. This should really be a given. Auto-log out. Yes.

I have (on more than one occasion) left my email up and walked away from my computer only to come back hours later to see that my email is still open. Is there a way to auto-logout via a configurable set of minutes?

a MUST!