Skip to main content

Not signed in

Open in new tab

If a user is not signed in to your service, tell them their answers will be deleted if the time runs out. You should include a countdown of the remaining time.

The service team should work with the relevant security team to agree the length of inactivity before the user is timed out of a session. This should be at least 20 minutes and you should not limit the number of times the user can extend their session.

If the user does not continue the session they are redirected to a page that tells them what has happened.

Get support

Need help implementing this in a prototype or production build? Get support from the Design System team.

Give feedback

We depend on insights from real projects to update and improve the design system. If you use something we made, tell us how it went.