About this block

Session Timeout Settings is the session control panel, an idle timeout Select defaulting to 1 hour with four options (15 minutes, 1 hour, 8 hours, and Never, the last labelled not recommended inline), a Remember this device toggle checked by default with the caveat only enable on devices you own, and a Sign out all other sessions action that tells the user exactly how many other devices are currently signed in (3) and that in-progress uploads on those devices will be interrupted.

Options are a flat const array. The Never label carries the honest qualifier inline rather than hiding the warning in a tooltip; the consequence line below the danger action names the interruption risk plainly.

When to use

Reach for this block on the security or account settings page, wired to your session policy API and the active session count from your auth provider. The sign-out action needs a server mutation with optimistic feedback.

A natural flow around it on an Application Pro page:

Before

• Settings shell

After

• Two factor settings
• Activity feed

What you can display

One strong use is the personal session security panel. Other variants:

• Org policy. A workspace-level max timeout that overrides personal preference for all members.
• Trusted devices list. A ruled table of remembered devices with individual revoke actions.
• Concurrent session limit. A Select capping how many active sessions are allowed at once.

Tip: put the consequence (uploads interrupted) in the caption below the action, not in a modal confirm, so users read it before they click.