Customer portal sessions last 14 days without activity and 30 days at most, keep sign-in tokens on the server, and ask you to confirm your identity before sensitive actions.
- You stay signed in to the customer portal for 14 days without activity, and for 30 days at most. Your sign-in survives browser restarts.
- Only your own activity, such as opening pages or taking actions, keeps a session alive. Background refreshes do not.
- Your browser holds only an opaque session cookie. Sign-in tokens stay on the server, which renews short-lived access tokens.
- Signing out ends the session immediately. Suspending an account or signing it out everywhere ends all of its sessions immediately.
- When this update ships, everyone is signed out of the customer portal once. Sign in again to start a new session.
- API key changes, account security settings, and billing changes (when paid billing is enabled) ask you to confirm it's you if you have not signed in recently. The sign-in and sessions guide lists the actions and the time limit.