diff --git a/app.py b/app.py
index 12b7aa8..84006d5 100644
--- a/app.py
+++ b/app.py
@@ -3292,6 +3292,7 @@ def login():
         if not user or not pin_ok:
             return render_template("login.html", error="Invalid username or PIN.")
 
+        session.permanent = True
         session["user_id"] = user["id"]
         session["username"] = user["username"]
 
@@ -3392,6 +3393,7 @@ def google_auth():
                 return redirect(session.pop('oauth_redirect_to', url_for("settings")))
         
         # Log them in
+        session.permanent = True
         session["user_id"] = user["id"]
         session["username"] = user["username"]
         if user["status"] == "blocked":
@@ -3450,6 +3452,7 @@ def google_auth():
         conn.commit()
         new_user = conn.execute("SELECT id FROM users WHERE username = ?", (username,)).fetchone()
         
+        session.permanent = True
         session["user_id"] = new_user["id"]
         session["username"] = username
         log_activity(new_user["id"], "REGISTER", "User registered via Google")
diff --git a/config.py b/config.py
index 0ebc082..1911712 100644
--- a/config.py
+++ b/config.py
@@ -22,7 +22,7 @@ class Config:
     SESSION_COOKIE_SECURE = False  # Set True in production with HTTPS
     SESSION_COOKIE_HTTPONLY = True
     SESSION_COOKIE_SAMESITE = 'Lax'
-    PERMANENT_SESSION_LIFETIME = timedelta(days=7)
+    PERMANENT_SESSION_LIFETIME = timedelta(days=30)
     
     # CSRF Protection
     WTF_CSRF_ENABLED = True