laceous

Due to lack of interest (both my own and based on the number of downloads) this plugin will not be updated for WP 3.0
WordPress’ auth cookies include a built-in expiration date (either 2 or 14 days depending on if the ‘Remember Me’ option is checked). Even if you remove the client-side cookie (by manually logging out or just closing your browser if ‘Remember Me’ wasn’t checked when logging in) the data that was stored within the cookie is still valid until the expiration date is reached.
This could be an issue if someone managed to “steal” your cookie(s). They would still be able to access your website for some time into the future.
This plugin will immediately invalidate your auth cookies when you manually log out. This, of course, also means that you have to manually click ‘Log out’ for this plugin to work properly (you can’t just close your browser to remove any cookies that expire at the end of the session). This won’t prevent session hijacking, but should limit the amount of time that an attacker can access your website.

Invalidate Logged Out Cookies

This plugin will immediately invalidate your auth cookies when you manually log out.

Deepen Bajracharya

Protect your WordPress users’ sessions from prying eyes and snoopers!
The Inactive Logout plugin automatically terminates idle user sessions, safeguarding your site if users leave their sessions unattended.
A simple plugin which is easy to configure and use. After installing and activating it, just set the idle timeout from the plugin settings. From then on, any unattended idle WordPress sessions will be automatically terminated. You can also display a custom message to users, warning them that their session is about to end.
Try it out ==> <a href="https://tastewp.org/plugins/inactive-logout/" title="Demo Link" rel="nofollow ugc">Demo</a>
FEATURES:.
<ul>
<li>Change idle timeout time.</li>
<li>Count down of 10 seconds before actual logout. You can remove this feature if you dont want it.</li>
<li>Add only Wake Up! message where user will not logout but instead a wakeup message will be shown upon inactive.</li>
<li>Custom Popup Message.</li>
<li>Show idle message for non authenticated users or redirect them.</li>
<li>Concurrent user logouts.</li>
<li>Toast notification on Logout.</li>
<li>Redirect to a Different Page instead of Popup box. Create a page such as timeout page and add your content there by creating a blank template or style it as you wish according to your theme.</li>
<li>Multiple User Role Configurations for individual timeout and session logout redirects.</li>
<li>Logout to custom page or existing page.</li>
<li>Clean UI</li>
<li>WooCommerce Supported.</li>
<li>Multisite Support: Override all sites with one setting.</li>
</ul>
EXTEND OTHER FEATURES:
Few of the key features to <a href="https://inactive-logout.com/pricing/" title="Inactive Logout Pro" rel="nofollow ugc">Inactive Logout Pro</a>:
<ul>
<li>Auto browser close logout after defined duration.</li>
<li>Fully functional multi-tab support.</li>
<li>User Based Logout</li>
<li>Track Visitors based on (Login time, logout time, browser, online status, session duration, role, os, IP)</li>
<li>Force Logout All Users</li>
<li>Logout Specific User(s)</li>
<li>Bulk Logout Users</li>
<li>Concurrent Login Limits.</li>
<li>Last Login Activity</li>
<li>Override Multiple Login priority</li>
<li>User Lock whenever certain limit login has been reached.</li>
<li>Track user login sessions.</li>
<li>Logout redirects.</li>
<li>Login redirects.</li>
<li>Email notification and email template overrides for Locked concurrent session.</li>
<li>Disable inactive logout for specified pages according to your need. Check this <a href="https://gist.github.com/techies23/6d2852eedd6ae56c486056e021e4ee48" title="documentation" rel="nofollow ugc">Documentation</a> for additional post type support.</li>
<li>Disable native wordpress login popup after logout</li>
<li>Modal Customizer</li>
</ul>
**See the <a href="https://inactive-logout.com/" title="Inactive Logout" rel="nofollow ugc">Inactive Logout</a> homepage for further information.
Please consider giving a <a href="https://wordpress.org/support/plugin/inactive-logout/reviews/#new-post" title="5 star thumbs up" rel="ugc">5 star thumbs up</a> if you found this useful.

Inactive Logout


Great plugin, does exactly what it says it does. Looks clean, nicely customisable, thanks a lot!


Great!

Automatically logout idle user sessions, with logout redirections and concurrent limit logins all in one place.

Invalidate Logged Out Cookies vs Inactive Logout