For example if I just close page or browser or anything else (without clicking "log out" on a site) - can this somehow endanger my account (info leaking or illegal access to an account) ?

  • Please be more clear with what you mean. The session on a website (identified through some session id, often stored in some cookie or handed over with GET/POST requests) does have nothing to do with HTTPS (which is HTTP traffic inside TLS). – phk Oct 27 '15 at 23:36

TLS just cares about the transport of the data between client and server. It does not care what happens on the client or server side with the data. Thus it is unrelated to TLS what happens with your data if you don't explicit log out, but is specific to the web application.


When you login to a website, you create a session that is connected to your account. When you logout from the site, you destroy or otherwise invalidate the session. On more security-focused sites, sessions typically timeout after a period of inactivity. It is this session that allows you to access pages in the site without requiring your username and password for every operation.

Sessions can sometimes be stolen or "hijacked". Of course, only an existing session can be hijacked. So logging out ensures that your session won't be hijacked.

Whether you should always logout of sites is something of a matter of personal choice and convenience. I logout from my bank but not from every site.

Note that closing a website in the middle of a transaction can have unpredictable results.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.