Protected session timeout is a time period after which the protected session is wiped out from browser's memory. This is measured from the last interaction with protected notes.