title: How long should you let a user stay signed in for on a web application?
body: <p><strong>Background to question:</strong>
  We are building an online web application that requires the user to sign in. We will add the ability to "keep me signed in on this computer for x weeks."</p>
  
  <p><strong>Question:</strong></p>
  
  <p>What is the normal standard for how long you should allow a user to stay signed in for?
  * 2 weeks?
  * 4 weeks?
  * Forever?</p>
  
  <p>And why? Is there a reason that we should not allow our users to stay signed in forever?</p>