diff --git a/config/config.sample.php b/config/config.sample.php index bad9aa86d8b65..2de2f4a920a24 100644 --- a/config/config.sample.php +++ b/config/config.sample.php @@ -334,10 +334,19 @@ */ /** - * Lifetime of the remember login cookie. This should be larger than the - * session_lifetime. If it is set to 0, remember me is disabled. + * Lifetime of logins where the user selected "Remember me", in seconds. * - * Defaults to ``60*60*24*15`` seconds (15 days) + * A value >``0`` means "Remember me" is available. + * To make "Remember me" unavailable to users, set to ``0``. + * + * To avoid unexpected expiry, set this higher than ``session_lifetime``. + * + * Despite the key name, this value applies to the full remember-me mechanism: + * persisted login state in the browser (remember-login cookies) and server-side + * expiration of remembered login tokens. Therefore, changing or clearing cookies + * alone may not fully reset remembered login state. + * + * Defaults to ``60*60*24*15`` seconds (15 days). */ 'remember_login_cookie_lifetime' => 60 * 60 * 24 * 15,