Context
In T300271: [IP Masking] Temporary Account Expiration, we set the temporary account expiration value to 1 year.
This might be an unnecessarily long duration for most good faith editing patterns. Especially as T359405: Create temporary account early in edit cycle for all edit attempts, we don't want to make it easy for abusers to mass create temporary accounts that can then be reactivated (by storing the session cookies) later.
90 days corresponds to the retention period for CheckUser data, so setting expiry to 90 days ensures that we can always run CheckUser on active temporary accounts.
Decision
This task proposes to reduce the expiration value for temporary accounts from 1 year to 90 days.
A much shorter duration, like 7 days, might also be desirable, but we could wait until we have temporary accounts in production to evaluate what good faith usage patterns of temporary accounts looks like before deciding.
Consequences
- Shorter timespan for users to make use of a temporary account