> For the complete documentation index, see [llms.txt](https://support.docstudio.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.docstudio.com/admin-panel/account-settings/how-to-configure-session-policy.md).

# ​How to Configure Session Policy

Session policy settings control how long sessions stay active and how users can sign in. To make the policy stricter, tighten the limits below.

1. **Idle session timeout** (`session-hours`). Decrease the value to shorten the idle time before the session expires.
2. **One session per user**. Enable it to prevent multiple sessions in the same browser.
3. **One session per user per IP**. Enable it to limit the user to one session per IP address.
4. **Max login attempts before lockout** (`max-login-attempts`). Decrease the value to lock users sooner after failed attempts.
5. **Lockout time** (`max-attempts-timeout-minutes`). Increase the value to keep users locked out longer.
6. **Allowed IP addresses**. Limit access to specific IP addresses.
7. **Blocked IP addresses**. Deny access from specific IP addresses.