Remember Me - but only for a while

[Tom Huizinga]

Our users like the Remember Me functionality for JIRA - but then they never have to put their password in for months which is not great for security and also allows them to totally forget their password and require a password reset.

Is it accurate that JIRA will never force the users to log in again? Is there any way to set limits on how long the system remembers (after a couple weeks, after 10 logons, etc.)

I've seen that a system administrator could clear the remember me tokens for everyone at once. Since I'm using On Demand JIRA I don't believe I have access to that. I also don't like the idea of clearing everyone at once since then we'll get a huge number of people all who have forgotten their passwords.

[Norman Abramovitz]

It looks like a feature that is being requested for Jira OnDemand.

https://jira.atlassian.com/browse/AOD-6445