diff --git a/CHANGELOG b/CHANGELOG
index b35e02268e..0be2be7672 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,5 +1,6 @@
 v 7.3.0
   - Always set the 'origin' remote in satellite actions
+  - Expire Rack sessions after 1 week
 
 v 7.2.0
   - Explore page
diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb
index 5fe5270236..b3fa648f2a 100644
--- a/config/initializers/session_store.rb
+++ b/config/initializers/session_store.rb
@@ -6,5 +6,6 @@ Gitlab::Application.config.session_store(
   key: '_gitlab_session',
   secure: Gitlab.config.gitlab.https,
   httponly: true,
+  expire_after: 1.week,
   path: (Rails.application.config.relative_url_root.nil?) ? '/' : Rails.application.config.relative_url_root
 )