Level AAASince WCAG 2.1

2.2.6 Timeouts

Guideline 2.2: Enough Time – People get the time they need.

What does the rule require?

People are told in advance how much inactivity leads to data loss – unless data is kept for more than 20 hours.

How to get it right

State at the start of a form: “For security you will be logged out after 30 minutes without input.”

Who benefits most?

Official wording

This page explains the rule in simple words. Only the original W3C text is normative.