got it set to remember device for 1 day…shouldn’t it auto log out of that device cos 3 days later the device is still logged in to a password protected page?
even after a pc restart still logged into a password protected page…not really any use that setting??
can I have my money back…this is not working as described I will have to go back to using htaccess as I dont want people staying logged in forever like what is happening at the moment…unless you will fix it very soon???
@Godber I’ve just pushed an update to the Password Protect component to the Elements Store. You should see it listed now in your updates.
Update and then republish your site, that should fix the issue for you. Do let me know if you’re still having issues with Password Protect and I’ll be sure to prioritise them
I did…always do that…but I started a new project just added the password protect item and it won’t accept it…..just get that line from the first image I put on
I wrote a test for the script locally that confirmed it should log you out correctly, but please do let me know if it’s still not working correct in a couple of days.
Thanks for the update. Sorry to hear this is still an issue. I am wondering if the reason you’re still logged in is due to how the “Remember Device” feature works as the expiration is set at the time you log in, not when you republish the site.
So if you logged in before making any changes, your browser would still has the original cookie with its original expiration date (which is 30 days by default and I’m unsure when you changed this setting).
I need your help testing this more thoroughly, so could do the following:
Clear your site cookies: In your browser, go to Settings → Privacy/Cookies and clear cookies just for your website’s domain.
Refresh the password protected page to verify you are now logged out.
Check your Remember Duration setting: In Elements, select your Password Protect component and check what the “Duration” field in the UX Features group is set to (default is 30 days).
Log in fresh: After clearing cookies, log in again. This new login will use your current duration setting.
Wait and test: If you set it to 1 day, you should be logged out after 24 hours from this new login.
Quick summary: Republishing updates the code, but it doesn’t change cookies already stored in browsers. You need to log in again after clearing cookies to get a fresh cookie with the new expiration.
Apologies again, hopefully we’ll have you up and running after this!