What is a user session?
A user session is like visiting a shop. When you enter the shop (log in to Nepton), you start a session. During your visit, the shop staff remember who you are and what you’re doing, like what items you pick up or ask about. When you leave the store (log out or close the browser), the session ends.
A session helps us remember you and identify your actions securely while you’re browsing. This means you don’t have to log in again every time you visit a new page or perform an action.
How long are user sessions in Nepton?
The session lengths in Nepton are intended to avoid unnecessary interruptions to regular users, whilst still maintaining a good level of security. Therefore, most users only need to login again after a weekend, holiday, or other longer work absence.
A user session is created when logging in and automatically renewed (i.e. the countdown timer restarted) every time the user visits a new page or refreshes their current one. If no pages are visited or refreshed for the durations listed below, then the user session is ended and they must reauthenticate via the login page.
- Mobile site - 20 hours
- Desktop site - 10 hours
Ending a session
On personal devices
On personal devices (i.e. devices used by a single user), it is generally not necessary to manually log out after each use. Sessions are managed automatically by the system and will expire after a period of inactivity.
On shared devices
On shared devices (i.e. devices accessible by multiple users), sessions must always be explicitly ended after use.
To end a session on a shared device:
- Click Logout in the application
- Close the browser window after logging out
Failing to log out on a shared device may allow subsequent users to access the previous user’s session.
On terminal devices
Terminal devices are inherently shared environments. Sessions are tied to individual actions rather than persistent user logins.
To end a session on a terminal:
- Complete the action using Start/Stop button
- Cancel the action using Cancel button
This ensures the session is closed and no further actions are associated with the previous user.