Affirm allows our users to stay signed in for an extended time with the “Remember Me” feature. It creates a more convenient and seamless experience by saving time and providing more reasonable security for the user on their specific device. 

This feature creates a cookie that acts as your authentication method with Affirm services along with an identifier to verify your device. Think of it like using your driver's license. The cookie is your license and the device identifier is your photo. Like your photo, it can be verified every time you access our site. Once the cookie has been added to your system it will be valid for 30 days—and every time you visit the site, the cookie will be extended for 30 days. If you haven’t signed in after 30 days, you’ll be required to re-authenticate. We recognize that this is optimal for convenience, but you reduce a measure of security and privacy.

The security risks associated with using this feature are longer session expiration times. Even after you’ve closed your browser or turned off your device, a determined attacker has the potential to gain unauthorized access to your account through sophisticated means. But we do our best to make sure they don’t get through. 

We recommend that you use the “Remember Me” feature intentionally, consider the risks of a longer session, and use it cautiously on devices you own and operate. We strongly suggest that you sign in to Affirm each time you visit and take advantage of our other security features to protect your account.