guidovanharten wrote: After startup of my computer I visit my website and I am logged in without entering login and password.
Was the computer totally shut down or merely put to sleep? Was the browser completely shut down, or was it still active? Is the browser configured to restore sessions & tabs, or configured to forget it all?
If you have closed all tabs, closed the browser, shut down the PC, started up the PC, started the browser and then navigate to your website, then it should prompt you for userid & password. If not, we should have a look at the configuration of the browser, since it really should have forgotten the session cookie.
guidovanharten wrote: When I (suddenly) leave my computer and another person visit my computer, it is not recommended he can do admin tasks. That's why I prefer an option to auto logoff like your bank website does.
Several issues here:
1. I currently work at a bank. If someone goes for a coffee or visit room 101 and leaves his/her screen unlocked, then we press Ctrl-Alt-Up. It teaches them to lock their screens. Very easy to do with the key combination [Win] - [L]
2. It is bad practice to use a user profile with all permissions on a daily basis. So create a user profile with Editor or Moderator access for your daily basis tasks. Use a separate account with Admin role, and use that only when needed. This reduces the risk of malice severely.
3. If your significant other is capable (that is: has the motivation and technical skills) of doing malice to your webtrees website, then you need to talk because there are probably other more severe problems at the root that need to be addressed ;-)