Automatic Session Timeout — How LedgerSync Protects Unattended Sessions

Overview

LedgerSync automatically logs out inactive sessions to protect client banking data on shared or unattended computers. If you’ve ever come back to your desk and found yourself logged out — this article explains why, and exactly how the timeout works.

How the Session Timeout Works

After 10 minutes with no user interaction (no clicks, typing, or navigation), a warning modal appears
The modal shows a 5-minute countdown
If you interact with the page (click anywhere, dismiss the modal), your session continues normally and the timer resets
If there is still no activity when the countdown ends, you are automatically logged out

Total time from last activity to logout: 15 minutes (10-minute idle period + 5-minute warning countdown).

Why This Exists

LedgerSync displays sensitive financial data — bank statements, transactions, and check images for your clients. An unattended, logged-in session on a shared office computer is a real security risk. Automatic timeout is a standard security control for financial platforms and is part of the security posture many accounting firms require from their vendors.

What Happens to My Work?

Any changes you had already saved are unaffected
Unsaved work in an open form may be lost when the session ends — save before stepping away
Background processes (statement pulls, rule application, syncs) continue running on the server; logging out does not interrupt them

FAQ

Can I extend or disable the timeout?
The timeout is a platform-wide security setting and cannot be disabled per user. Simply interacting with the page when the warning appears keeps your session alive.

Does this affect my clients using the mobile app or bank connection links?
Client bank-connection flows are separate short-lived secure sessions and are not affected by the in-app timeout.

Related Articles: