Session Timeout and Security Basics

Loyva handles sensitive customer and contract data, so the app protects your account with automatic session timeouts, secure password resets, and per-user PINs on the vault. This article explains how each protection works and what you can do to keep your account safe.

How session timeouts work

Loyva signs you out automatically after a period of inactivity. There are two timers:

  • Inactivity timeout: 15 minutes. If you don’t click, type, scroll, or move the mouse for 15 minutes, your session ends.

  • Absolute timeout: 8 hours. Even if you’re actively using Loyva, your session ends 8 hours after sign-in and you’ll need to log in again.

The 2-minute warning
Two minutes before an inactivity timeout, a Session Timeout Warning dialog appears with a live countdown. You have two choices:

  • Stay Logged In: resets the inactivity timer and dismisses the warning.

  • Logout Now: ends your session immediately.

If you ignore the dialog, you’re signed out automatically when the countdown hits zero.

What counts as activity

  • Clicks, key presses, scrolling, and mouse movement inside the Loyva tab.

  • Activity in any open Loyva tab resets the timer in every other Loyva tab, so working across tabs won’t log you out.

  • When a tab is in the background, the inactivity timer pauses. It resumes when you return.

Signing out manually

  1. Click your profile menu at the bottom of the left sidebar.

  2. Choose Sign out.

  3. You’re returned to the sign-in page and your session is invalidated everywhere.

  4. Sign out manually on shared or public computers. Don’t rely on the timeout.

Recognizing legitimate Loyva emails

  • Loyva emails come from addresses ending in @loyva.app.

  • Password reset and signature links go to https://loyva.app or your id-preview…lovable.app preview URL: hover before clicking.

  • Loyva will never ask for your password by email or chat.

Frequently asked questions

Can I extend the 15-minute timeout?
Not today. The limits are set organization-wide for compliance reasons. The 2-minute warning gives you a window to stay signed in before any work is lost.

I was signed out while filling out a long form. Did I lose my work?
In most cases, unsaved form changes are lost on sign-out. For long documents and proposals, click Save periodically and avoid leaving the tab idle for more than ~13 minutes.

Why do I get the warning even when I have the tab open?
Having the tab open doesn’t count as activity, you need to interact (click, type, scroll). If the tab is in the background, the timer pauses; bringing it to the foreground resumes it.

I have Loyva open in two tabs. Will one tab log out the other?
No. Activity in any Loyva tab keeps every other Loyva tab signed in. When you sign out manually, all tabs sign out together.

Someone may have seen my password. What do I do?
Reset it immediately from Settings > My Preferences > Password & Security. If you suspect broader account compromise, also ask your admin to review your recent activity and, if needed, remove and re-invite your user.