# 2FA + longer session time

**URL:** <https://community.piwik.pro/t/2fa-longer-session-time/1351>\
**Category:** Request a feature & Roadmap\
**Created:** [December 12, 2022, 1:56pm UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351 "2022-12-12T13:56:43Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![rmeekers](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/rmeekers/32/929_2.png) [@rmeekers](https://community.piwik.pro/u/rmeekers)\
**Post date:** [December 12, 2022, 1:56pm UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351/1 "2022-12-12T13:56:43Z")

</div>

I have a feature request regarding the backend of Piwik Pro:

1. Can we have the possibility to protect our account with 2 factor authentication? A tag management system is quite sensitive when it comes to website code injection, so I want maximum security on this side
2. Can we stay logged in longer than currently is the case? After 10? 15? min of inactivity I have to login again; this is quite annoying

And to finish: when my session has expired, I often (most of the time) have to login twice. The first time I submit my credentials, I have to enter them again on the login screen and only thereafter I’m logged in. I think this is a bug.

---

<div class="post-metadata">

**Author:** ![Tymek](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/tymek/32/268_2.png) [@Tymek](https://community.piwik.pro/u/Tymek)\
**Post date:** [December 12, 2022, 3:01pm UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351/2 "2022-12-12T15:01:47Z")

</div>

Hi @rmeekers  
2 FA authentication for Core is being developed as we type. It’s a part of a bigger project, we expect to launch it in Q1 2023.  
You are correct that the session expires in 30 minutes of inactivity, any activity in the Piwik PRO Analytics suite extends your session for another 30 minutes.

Regarding the session expiration - it should not require you to go through the log in twice, can you share with me your account and user details (in a personal message) so we can troubleshoot?  
Tymek

---

<div class="post-metadata">

**Author:** ![rmeekers](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/rmeekers/32/929_2.png) [@rmeekers](https://community.piwik.pro/u/rmeekers)\
**Post date:** [December 12, 2022, 4:07pm UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351/3 "2022-12-12T16:07:41Z")

</div>

thanks, that’s great to hear! I will share my details in a pm.

---

<div class="post-metadata">

**Author:** ![chikashi](https://avatars.discourse-cdn.com/v4/letter/c/77aa72/32.png) [@chikashi](https://community.piwik.pro/u/chikashi)\
**Post date:** [December 23, 2022, 11:13am UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351/4 "2022-12-23T11:13:51Z")

</div>

I am also having to log in twice each time a session had expired. A bit annoying…

---

<div class="post-metadata">

**Author:** ![Tymek](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/tymek/32/268_2.png) [@Tymek](https://community.piwik.pro/u/Tymek)\
**Post date:** [December 29, 2022, 7:08am UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351/5 "2022-12-29T07:08:14Z")

</div>

Hi @chikashi welcome to our Community!  
Can you confirm you are still asked to log in twice? If so - would you share with me (in a personal message) the HAR file from your browser?  
Tymek

---

<div class="post-metadata">

**Author:** ![chikashi](https://avatars.discourse-cdn.com/v4/letter/c/77aa72/32.png) [@chikashi](https://community.piwik.pro/u/chikashi)\
**Post date:** [December 31, 2022, 12:03pm UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351/6 "2022-12-31T12:03:22Z")

</div>

Hi Tymek,

Thanks for your message.

Clearing the browser history seems to have resolved the issue. FYI, I am using the latest version of Brave on macOS 10.13.6.

If it happens again, I will send you the HAR file for you to examine.

Wishing you a happy and healthy 2023.

Kind regards,  
Chikashi

---

<div class="post-metadata">

**Author:** ![Tymek](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/tymek/32/268_2.png) [@Tymek](https://community.piwik.pro/u/Tymek)\
**Post date:** [January 2, 2023, 7:36am UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351/7 "2023-01-02T07:36:08Z")

</div>

thanks @chikashi for sharing an update!  
All the best in 2023!

---

<div class="post-metadata">

**Author:** ![Tymek](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/tymek/32/268_2.png) [@Tymek](https://community.piwik.pro/u/Tymek)\
**Post date:** [April 18, 2023, 5:15pm UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351/8 "2023-04-18T17:15:31Z")

</div>

Hi @chikashi @rmeekers ,

Today it was brought to my attention that I missed updating you about the status.  
The solution is not yet ready, we’re getting to the final stage of development and heavy testing. As the new solution is going to bring a few other features along we need to test it properly.  
The plan for delivery is mid-summer.  
Apologies for missing the communication! In case of your questions - don’t hesitate to inquiry here or in a private message.  
Tymek

---

<div class="post-metadata">

**Author:** ![Tymek](https://dub1.discourse-cdn.com/flex005/user_avatar/community.piwik.pro/tymek/32/268_2.png) [@Tymek](https://community.piwik.pro/u/Tymek)\
**Post date:** [December 4, 2023, 12:49pm UTC](https://community.piwik.pro/t/2fa-longer-session-time/1351/9 "2023-12-04T12:49:35Z")

</div>

@rmeekers @chikashi  
I got a news for you, now you can extend the session inactivity time for your Piwik PRO Core account.  
You need to go to Administration - Account - Account settings and change the value for Session inactivity timeout. The default value is set to 30 minutes, you can extend it up to 8 hours.  
Tymek
