A10.02.6Idle-timeout mode reversiondesign

A mode can auto-revert after an idle timeout

Aliases: idle timeout · auto-revert · timeout exit

What it is

For a persistent mode that's neither a good fit for a quasimode (needs to last several minutes or more) nor for full elimination (an object-plus-action structure can't carry it), an idle-timeout reversion offers a third path: if the user takes no relevant action for some stretch of time after entering a mode, the system reverts to the default state on its own, rather than waiting for the user to remember to exit. This effectively shifts responsibility for "exiting" from "the user has to remember" to "the system actively detects inactivity and handles it," at the cost of needing a threshold for how long counts as idle.

Why it happens

One of the settings where mode errors happen most easily is when a user enters a mode, gets interrupted by something else, and comes back having forgotten they're still in it — and that interval from interruption to return is usually also a stretch of no activity. An idle timeout exploits exactly that regularity: once the system can detect that relevant activity has stopped for long enough, it's reasonable to infer the user's attention has moved on, and reverting proactively is safer than waiting for the user to remember, because every action taken during the wait that misapplies the current mode's meaning becomes an error — proactive reversion simply closes that risk window. This mechanism doesn't depend on the user's memory performance at all; it depends only on the system's detection of an objective signal, "how long has activity been stopped," so it doesn't degrade as the user gets tired or distracted.

Where it stops holding

Setting the timeout duration involves a real trade-off: set it too short, and it reverts the mode while the user is still thinking normally and has merely paused their hands, producing a new kind of confusion — "the system changed my state on its own" — and an unwanted interruption. Set it too long, and the risk window for misapplying the old mode after an interruption stays open too long, making the mechanism largely toothless. Beyond that, idle-timeout reversion only suits modes where exiting is low-cost — if a mode exists specifically to protect an incomplete multi-step operation (a form still being filled in), forcing it to time out risks losing data instead; that scenario calls for "save a draft and prompt" rather than silent exit.

Applying it

For every persistent mode, set an idle threshold derived from that mode's typical operating rhythm — clearly longer than a natural pause during normal use, and clearly shorter than a typical interruption (leaving to do something else). Before reverting, give the user a perceptible but non-disruptive cue (a fading or gently blinking status indicator, say) rather than reverting silently. Verification: log the distribution of activity gaps for a set of real users in that mode, and use the upper end of natural pauses as a lower bound for the timeout threshold. After launch, track the rate at which users manually re-enter the mode right after being timed out of it — a high rate means the threshold is set too short and is catching users who were still focused on the task.

Related

  • Same group: A10.02.4 a quasimode is sustained by continuous physical actuation and exits on release · A10.02.9 the consequences of a mode error must be recoverable
  • Nearby: A10.08 error tolerance and graceful degradation
  • Search terms: idle timeout · auto-revert · session timeout

Cards in the same group

Quick Actions

Share

Share this page

ios_share

https://hci.top/en/handbook/A10.02.6