diff --git a/DysonNetwork.Pass/Auth/AuthService.cs b/DysonNetwork.Pass/Auth/AuthService.cs
index 48b87ee..b9df27b 100644
--- a/DysonNetwork.Pass/Auth/AuthService.cs
+++ b/DysonNetwork.Pass/Auth/AuthService.cs
@@ -213,8 +213,7 @@ public class AuthService(
         var session = new AuthSession
         {
             LastGrantedAt = now,
-            // Never expire server-side
-            ExpiredAt = null,
+            ExpiredAt = now.Plus(Duration.FromDays(7)),
             AccountId = challenge.AccountId,
             ChallengeId = challenge.Id
         };