---
url: https://docs.revis.io/admin/set-session-timeout-and-link-expiry.md
description: >-
  Sign people out after a period of inactivity or a fixed time, and choose how
  long revis.io's media download and streaming links stay valid.
---

# Set session timeout, session length, and download link expiry

On the **Security** page of **Organization settings**, you choose when revis.io signs people out and how long the links it creates for media downloads and streaming stay valid. Session settings apply to the web app and the desktop app.

::: info Before you start

* **Who:** organization Owners and Admins. Everyone else sees the page read-only.
* **Where:** the web app.
  :::

## Change the settings

1. Select your organization's icon at the top of the sidebar, then the gear next to its name (**Organization settings**).
2. Select **Security**.
3. Choose values for the settings below.
4. Select **Save Changes**.

| Setting | Options | Default | What it does |
| --- | --- | --- | --- |
| **Session Idle Timeout** | **Disabled**, or 30 minutes to 24 hours | **Disabled** | Signs people out after this long without activity |
| **Session Lifetime** | 8 hours to 90 days | 14 days | Makes people sign in again after this long, even if they're active |
| **Pre-Signed URL Expiry** | 1 hour to 7 days | 1 hour | How long the download and streaming links revis.io creates for media stay valid |

## How the settings combine

* **Several organizations:** if someone belongs to more than one organization, the strictest setting of all their organizations applies to them.
* **Idle timeout and lifetime:** an idle timeout longer than the session lifetime has no effect, because the lifetime signs people out first.
* **Share links:** **Pre-Signed URL Expiry** doesn't change when a review's share link expires. Set that in the share link itself, or set a default under **Link Sharing**.

The **Security** page also holds **API Key Rotation** and, when your organization has SAML single sign-on, **Require SAML SSO**.