Session Timeout Limit in ASP.NET?

Question

I'm amending a Session time out in the Web.Config for an ASP.NET application written in C# and currently I have the timeout set to 120 minutes as shown below:

<sessionState mode="InProc" cookieName="Application_SessionId" timeout="120"/>

Is there a limit to this value? So if for example I wished to set it to 24 hours (1440 minutes) would this be applied?

It's ASP.NET version 4.0 with MVC 2.0

Suman Banerjee · Accepted Answer · 2014-01-14 13:56:48Z

24

The Timeout property cannot be set to a value greater than 525,600 minutes (1 year). The default value is 20 minutes.

Disadvantage: You will have performance issues if you have large number of users and with increase in session timeout, your inactive sessions will remain in Web server memory which may cause application pool to recycle, which would result in loosing all sessions for all users.

answered Jan 14, 2014 at 13:56

Suman Banerjee

1,9614 gold badges24 silver badges40 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Jonathan Wood Over a year ago

When I log into Facebook, I can come back a week later and I'm still logged in. This is of great value to me. So are you saying if I make it a week or so for my MVC application that it will have performance ramifications? Is there another way to increase session length?

Daniel Over a year ago

@JonathanWood I'm guessing they have a separate, lightweight authentication server for this purpose, or use some other kind of cookie

Nani · Accepted Answer · 2017-06-30 06:22:55Z

7

by default the value is 20 and the maximum value is 525600 (525600 minutes equivalent to one year). Maintain below code in your Web.config file to maintain maximum session timeout:

<system.web>
    <sessionState mode="InProc" timeout="525600"></sessionState>
    ...
</system.web>

Above one worked for me. Please refer here

answered Jun 30, 2017 at 6:22

Nani

1,1863 gold badges22 silver badges36 bronze badges

Comments

sm_ · Accepted Answer · 2013-07-18 10:04:19Z

4

I am not sure if it makes sense to set the session timeout to 24 hours, but yes it would be applicable to set it to a maximum of 365 days i think.

answered Jul 18, 2013 at 10:04

sm_

2,6122 gold badges19 silver badges34 bronze badges

Collectives™ on Stack Overflow

Session Timeout Limit in ASP.NET?

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related