Learn · 1/2

Logging in is not enough

After login the session stays open. Not logging out on shared PCs, enabling 'remember me' everywhere, or stolen session cookies create risk.