# Session Security

> Sign team members out of every device and set session limits for your company: a maximum session length and an inactivity timeout.

Category: Security & Compliance

Source: https://doc.checkgrow.com/docs/session-security

## Overview

Company admins control how long sign-ins to Checkgrow last. You can sign any member of your team out of every device at once, and you can set two limits for your whole team: a **maximum session length** and an **inactivity timeout**.

The limits apply only to your team. Other companies on Checkgrow are not affected, and nothing changes until you set a limit.

> **Takes effect everywhere**
> 
> Signing someone out ends their sessions on every device and browser, not just the one they are using. Every sign-out is recorded in the audit log.

## Who needs it

Use these controls when you need to:

-   Sign out a colleague whose laptop or phone was lost or stolen.
-   End every session of an account you suspect is compromised.
-   Meet a security or compliance policy that limits how long a session may stay open, or requires sign-out after inactivity.
-   Offboard someone who is leaving your team.

> **Company admins only**
> 
> Only company admins can sign out members and change the session limits. Team members do not see these options.

## Sign a member out of every device

1.  **Open the Team page**
    
    Select your company, then open **Team** and stay on the **Members** tab.
    
2.  **Choose the member**
    
    Click the **⋯** menu at the end of the member's row, or click the member to open their details panel.
    
3.  **Sign them out**
    
    Click **Sign out everywhere**, then **Sign out** to confirm. The member must sign in again on every device. Their access to your company does not change.
    

![Team Members tab with one member's menu open, showing Sign out everywhere](https://doc.checkgrow.com/images/docs/team-member-sign-out.jpg)

> **Removing someone from their last company**
> 
> When you use **Exclude from Company** and it was the person's only company, they are also signed out of every device. People who still belong to another company keep their sessions there, and lose access to your company's data straight away.

## Set session limits for your team

1.  **Open the Security tab**
    
    Open **Team** and choose the **Security** tab.
    
2.  **Set the maximum session length**
    
    Under **Maximum session length**, pick 12 hours, 24 hours, 7 days or 30 days. After that time, people must sign in again, even while they are working.
    
3.  **Set the inactivity timeout**
    
    Under **Sign out after inactivity**, pick 15 minutes, 30 minutes, 1 hour, 4 hours or 8 hours. People are signed out after that long without mouse, keyboard or touch input in Checkgrow.
    

![Team Security tab with Maximum session length and Sign out after inactivity](https://doc.checkgrow.com/images/docs/team-security-settings.jpg)

> **Saved instantly, applied within 5 minutes**
> 
> Each change saves as soon as you pick a value and applies to everyone on your team within 5 minutes. Choose **Off** to remove a limit.

## Common questions

### Do people get a warning before an inactivity sign-out?

Yes. A notice appears one minute before the sign-out. Moving the mouse or pressing a key keeps them signed in. After an inactivity sign-out, the sign-in page explains what happened.

### What if someone has Checkgrow open in several tabs?

All tabs on the same browser share one inactivity clock, so working in one tab keeps the others signed in too.

### What if a person belongs to several companies?

A sign-in is not tied to one company, so the strictest limits of all their companies apply. For example, if one company sets 30 minutes of inactivity and another sets 8 hours, the person is signed out after 30 minutes.

### What happens on a device where Checkgrow is closed?

Checkgrow also ends sessions on its servers, so a laptop that was closed past the limit asks for a new sign-in when it is opened again.

### Can I sign myself out of every device?

Yes. **Sign Out** in your account menu ends your sessions on every device, not only the one you are using.

## Related features

[Platform security standards](https://doc.checkgrow.com/docs/platform-security-standards)

[GDPR compliance](https://doc.checkgrow.com/docs/gdpr-compliance-guide)