Automatic Session Timeout — How LedgerSync Protects Unattended Sessions
Overview
LedgerSync automatically logs out inactive sessions to protect client banking data on shared or unattended computers. If you’ve ever come back to your desk and found yourself logged out — this article explains why, and exactly how the timeout works.
How the Session Timeout Works
- After 10 minutes with no user interaction (no clicks, typing, or navigation), a warning modal appears
- The modal shows a 5-minute countdown
- If you interact with the page (click anywhere, dismiss the modal), your session continues normally and the timer resets
- If there is still no activity when the countdown ends, you are automatically logged out
Total time from last activity to logout: 15 minutes (10-minute idle period + 5-minute warning countdown).
Why This Exists
LedgerSync displays sensitive financial data — bank statements, transactions, and check images for your clients. An unattended, logged-in session on a shared office computer is a real security risk. Automatic timeout is a standard security control for financial platforms and is part of the security posture many accounting firms require from their vendors.
What Happens to My Work?
- Any changes you had already saved are unaffected
- Unsaved work in an open form may be lost when the session ends — save before stepping away
- Background processes (statement pulls, rule application, syncs) continue running on the server; logging out does not interrupt them
FAQ
Can I extend or disable the timeout?
The timeout is a platform-wide security setting and cannot be disabled per user. Simply interacting with the page when the warning appears keeps your session alive.
The timeout is a platform-wide security setting and cannot be disabled per user. Simply interacting with the page when the warning appears keeps your session alive.
Does this affect my clients using the mobile app or bank connection links?
Client bank-connection flows are separate short-lived secure sessions and are not affected by the in-app timeout.
Client bank-connection flows are separate short-lived secure sessions and are not affected by the in-app timeout.
Related Articles:
Related Articles
Describe Ledgersync's Security?
Overview At LedgerSync, we prioritize security with robust measures to protect our clients’ data. Here is an overview of our security protocols. 1. User/Password Security LedgerSync does not store user/password information when using the Mastercard ...Ledgersync Compliance Documents
Attached is a list of compliance documents and proof of insurance. Please hover over the document and download. Any questions please let maurice.berdugo@ledgersync.com know.Securing Your LedgerSync Account: Two-Factor Authentication (2FA) Setup
Overview LedgerSync supports two-factor authentication (2FA) on your main login using an authenticator app such as Google Authenticator, Microsoft Authenticator, or Authy. With 2FA enabled, signing in requires both your password and a time-based code ...How to auto fetch Check and Deposit Images?
Ledgersync makes it really simple to fetch check and deposit images. Follow the steps below to enable Ledgersync to access and auto fetch your client check and deposit images 1- Click on the client you want to view check and deposit images 2- click ...How To Sign Up To LedgerSync
Overview Ready to get started with LedgerSync? This guide walks you through the signup process step by step. Steps to Sign Up Step 1: Go to the LedgerSync Website Visit www.ledgersync.com and click Sign Up in GREEN Step 2: Complete the Signup Form ...