How to review your account activity and active sessions

Two lists show who has been in your account: Active sessions for the devices signed in now, and Account activity for what happened. Check both whenever something looks wrong.

See your active sessions

1. Open the panel, click Account, then Security under Access.
2. Scroll to Active sessions. The page says "Anywhere your account is signed in".

Each session is a row with the browser and system, the IP address, and when it was last active. Your own device carries a This device badge and Active now. Every other session has a Revoke button. If there are no other sessions, the page says so.

Revoke a session

Click Revoke next to any session you do not recognise. That device is signed out at once. Use Sign out everywhere else, which appears when there are other sessions, to end all of them except the one you are using.

If you revoke a session you do not recognise, change your password straight afterwards. See How to change your password and secure your account.

Read your account activity

Click Account activity under Access. It lists sign-ins and changes to your account.

Sign-ins appear here as you make them. A brand-new account may show Nothing recorded yet. Look for:

• sign-ins at times you were not there
• changes to your password, two-factor or API keys that you did not make

Security alerts

You are alerted in the panel and by email when you sign in from somewhere new, and when your password, two-factor or API keys change. These alerts cannot be turned off. See How to manage notifications and preferences.

A different log for servers

Each server has its own activity log for what happens on it. See How to see what happened on your server.