# 3 day inactivity timeout on essential plan

**URL:** <https://community.auth0.com/t/3-day-inactivity-timeout-on-essential-plan/102861>\
**Category:** Get Help\
**Tags:** new-universal-login-experience, login-experience\
**Created:** [March 19, 2023, 5:01am UTC](https://community.auth0.com/t/3-day-inactivity-timeout-on-essential-plan/102861 "2023-03-19T05:01:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![john.bryant](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/john.bryant/32/27606_2.png) [@john.bryant](https://community.auth0.com/u/john.bryant)\
**Post date:** [March 19, 2023, 5:01am UTC](https://community.auth0.com/t/3-day-inactivity-timeout-on-essential-plan/102861/1 "2023-03-19T05:01:29Z")

</div>

Do our users really get logged out if they don’t use our app every 3 days, regardless of any other session / refresh token settings? This is a **nightmare** user experience scenario for us.

Seems like a questionable (at best) tactic to get people to pay for a higher tier on Auth0, especially struggling bootstrapped startups like us that are trying to do everything they can to give users the best possible experience and retain customers. We don’t have the money to pay for an enterprise plan. Is there anything we can do? Other than hacking in an insecure workaround, like a backend “keep-alive” job, which would require us to store users’ refresh tokens.

Am I missing something here? There are a lot of other posts on the same topic, so I imagine I am not:

[**https://community.auth0.com/t/short-inactivity-timeout/57918**](https://community.auth0.com/t/short-inactivity-timeout/57918)

[**https://community.auth0.com/t/handling-short-inactivity-timeout-and-user-acceptance-of-repeated-session-expiration/31363**](https://community.auth0.com/t/handling-short-inactivity-timeout-and-user-acceptance-of-repeated-session-expiration/31363)

[**https://community.auth0.com/t/handling-short-inactivity-timeout/50405**](https://community.auth0.com/t/handling-short-inactivity-timeout/50405)

[**https://community.auth0.com/t/increase-inactivity-timeout-and-require-log-in-after-on-the-essentials-plan/81337**](https://community.auth0.com/t/increase-inactivity-timeout-and-require-log-in-after-on-the-essentials-plan/81337)

[**https://community.auth0.com/t/auth0-increase-inactivity-timeout/75735**](https://community.auth0.com/t/auth0-increase-inactivity-timeout/75735)

[**https://community.auth0.com/t/auth0-session-lifetime/59055**](https://community.auth0.com/t/auth0-session-lifetime/59055)

[**https://community.auth0.com/t/is-it-possible-to-use-auth0-for-long-term-web-authentication/20550/2**](https://community.auth0.com/t/is-it-possible-to-use-auth0-for-long-term-web-authentication/20550/2)

[**https://community.auth0.com/t/how-to-stay-logged-in-forever-ish/62926/10**](https://community.auth0.com/t/how-to-stay-logged-in-forever-ish/62926/10)

---

<div class="post-metadata">

**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\
**Post date:** [March 21, 2023, 12:16am UTC](https://community.auth0.com/t/3-day-inactivity-timeout-on-essential-plan/102861/3 "2023-03-21T00:16:41Z")

</div>

Hi @john.bryant,

Thanks for reaching out to the Auth0 Community!

> [@john.bryant](#):
>
> Do our users really get logged out if they don’t use our app every 3 days, regardless of any other session / refresh token settings?

Yes, that is correct. Our documentation states the following:

 ![image](https://global.discourse-cdn.com/auth0/original/3X/b/e/bea2ad0417e35c8708465cfe01ba5ea14feba3d9.png)  
(Reference: [Session Lifetime Limits](https://auth0.com/docs/manage-users/sessions/session-lifetime-limits))

> [@john.bryant](#):
>
> Is there anything we can do?

I recommend using the [Refresh Token Rotation](https://auth0.com/docs/secure/tokens/refresh-tokens/refresh-token-rotation) technique to persist the user session longer than 3 days, as you have found.

Doing so would be the best way to extend the user’s session.

Please let me know how this works for you.

Thanks,  
Rueben

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 4, 2023, 12:16am UTC](https://community.auth0.com/t/3-day-inactivity-timeout-on-essential-plan/102861/4 "2023-04-04T00:16:43Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.