Session Security

OutflowGuard implements session security measures to protect your account.

Automatic Logout

Sessions automatically expire after a period of inactivity:

• Warning displayed before timeout

• Option to extend session

• Automatic logout if not extended

Session Management

• Single session per device - Logging in on a new device doesn't end other sessions

• Secure cookies - HTTP-only, secure flags set

• Session tokens - Encrypted and not stored in local storage

Manual Logout

To manually end your session:

1. Click your profile/avatar

2. Select "Sign Out"

3. Session is immediately terminated

Logging Out of All Devices

If you suspect unauthorised access:

1. Contact support immediately

2. Request all sessions be terminated

3. Change your authentication method

Best Practices

• Don't leave sessions open on shared computers

• Use private/incognito mode on public computers

• Log out when finished