Delete old sessions after

Sessions with no activity longer than this many hours are removed. Default 72. Max 8760.

Settingmod_sec_delete_sessions_after

Delete old sessions after

Sessions whose last activity is older than this many hours are removed (pruned on login completion).

Where to find it

Admin → Settings → Mods → Security → Delete old sessions after

Setting key: mod_sec_delete_sessions_after

Default 72 hours if empty or invalid. Maximum 8760 hours (one year).

Common problems

Users randomly logged out

Inactivity window too short for how often people return. Raise the hours.

Want shorter for security

Lower the value; combine with Restrict session to single IP only if you accept mobile friction.

Related