Vault Timeout Options

Vault timeout determines how your vault will behave after a specified period of inactivity. Timeout is set individually for each Bitwarden app from the Settings. When configuring your vault timeout settings, you can set both the timeout and timeout action:

Vault timeout determines how long Bitwarden can be inactive before timing out. "Inactivity" is determined by time since interacting with Bitwarden, not system idle time. Each app has standardized options (for example, 1 minute, 15 minutes, 1 hour) as well as options specific to certain apps (for example, On System Idle) and a custom input. Enterprise organizations can implement a maximum allowable timeout.

Due to the web vault and browser extension depending on your web browser, there are unique "timeout" scenarios to consider:

1. If you refresh your browser (CMD/CTRL + R), your web app will lock. Refreshing will not affect a browser extension.

2. If you close your browser tab, you will be logged out of your app vault. Closing a single tab will not affect a browser extension.

3. If you close your browser window, you will be logged out of your web app and your browser extension will timeout.

   tip

   By default, if you close your browser window, your browser extension will require you to login or unlock with your master password regardless of your selected vault timeout action.

   You can allow the browser extension to unlock with a PIN after closing the browser window by unchecking the Lock with master password on browser restart option that is presented when you setup your PIN.

4. If your device is set to use a screen saver, your browser extension will interpret activation of the screen saver as a system lock and will timeout if the On system lock option is selected.

This option determines what Bitwarden will do once the vault timeout is reached. Options include:

• Lock (default)

  Locking your vault will maintain vault data on the device, so unlocking your vault can be done offline. You will be required to enter your master password or PIN, or use biometrics, but won't need to use any active two-step login methods.

• Log out

  Logging out of your vault completely removes all vault data from your device. Logging back in will require you to re-authenticate your identity, so logging in can only be done when online. You will be required to enter your master password and any active two-step login method.