Sessions expire after 12 hours of password idle. Only one device per account.