diff --git a/hub/src/web/routes/auth.ts b/hub/src/web/routes/auth.ts
index 8d287b02..b66f36bd 100644
--- a/hub/src/web/routes/auth.ts
+++ b/hub/src/web/routes/auth.ts
@@ -71,7 +71,7 @@ export function createAuthRoutes(jwtSecret: Uint8Array, store: Store): Hono<WebA
         const token = await new SignJWT({ uid: userId, ns: namespace })
             .setProtectedHeader({ alg: 'HS256' })
             .setIssuedAt()
-            .setExpirationTime('15m')
+            .setExpirationTime('4h')
             .sign(jwtSecret)
 
         return c.json({
diff --git a/hub/src/web/routes/bind.ts b/hub/src/web/routes/bind.ts
index 32f77061..f4962fda 100644
--- a/hub/src/web/routes/bind.ts
+++ b/hub/src/web/routes/bind.ts
@@ -51,7 +51,7 @@ export function createBindRoutes(jwtSecret: Uint8Array, store: Store): Hono<WebA
         const token = await new SignJWT({ uid: userId, ns: namespace })
             .setProtectedHeader({ alg: 'HS256' })
             .setIssuedAt()
-            .setExpirationTime('15m')
+            .setExpirationTime('4h')
             .sign(jwtSecret)
 
         return c.json({
diff --git a/web/src/hooks/useAuth.ts b/web/src/hooks/useAuth.ts
index 054ced5a..66343c9f 100644
--- a/web/src/hooks/useAuth.ts
+++ b/web/src/hooks/useAuth.ts
@@ -267,7 +267,7 @@ export function useAuth(authSource: AuthSource | null, baseUrl: string): {
         }
 
         const handleActive = () => {
-            void refreshAuth({ minTtlMs: 60_000 })
+            void refreshAuth({ force: true })
         }
 
         const handleVisibilityChange = () => {