---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Minimize session window timeout duration

# Minimize session window timeout duration {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.ui.user_cookie.life_span_in_days property to set the
expiration time period for the Remember Me cookie. The default value is 15 days and the maximum
cap is at 30 days.
The glide.ui.user_cookie.life_span_in_days system property affects the expiry of cookies. After each successful authentication, the cookie will expire after the number of days specified as the property
value. If glide.ui.user_cookie.life_span_in_days isn't set to the recommended value of <kbd class="ph userinput">15</kbd> or less, then there is a higher risk that the cookie, if stolen, can be used for longer.

Ensure the property glide.ui.user_cookie.life_span_in_days is set to <kbd class="ph userinput">15</kbd> or less.

## More information {#sc-session-window-timeout__section_wc1_cqn_phc}

{#sc-session-window-timeout__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.ui.user_cookie.life_span_in_days |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | 15 or less |
| Default value | 15 |
| Fallback value | 15 |
| Category | [Session management](https://www.servicenow.com/docs/BjjvH7NbZWponRYVuTElEA "This category looks at the security of the application state for a user. Sessions should be unique to each individual, unable to be guessed or shared, and invalidated after periods of inactivity or when not required. This includes factors such as cookie attributes for cookie-based sessions, session token generation, and storage and requirements for federated re-authentication.") |
| Security risk | * Severity score: 4.9 * CVSS rating: Medium * Security risk details: A longer life span increases the time window that a stolen cookie can be used. {#sc-session-window-timeout__ul_g1g_3sf_xwb} |
| Functional impact | This property is enabled by the end user when the end user checks the Remember me check box from the login page and logs in to the ServiceNow AI Platform. |
| Dependencies and prerequisites | None |
[ ]

{#sc-session-window-timeout__table_ajc_b43_3kb}