Sign-in alerts and signed-in devices

New sign-in emails

Whenever an unfamiliar device or network signs in to your workspace, we email you the time, the device and the IP address. Your very first sign-in does not trigger one.

If you recognise it, there is nothing to do. If you do not:

1. Change your password in Settings.
2. Use Sign out everywhere else under Devices.
3. Make new backup codes.
4. Raise a ticket; we will go through recent activity together.

Sign-in history

Settings → Sign-in history lists each attempt from the past 180 days with the time in UTC, the device, the IP address and whether it worked. Failed attempts from places you do not know are worth a password change.

Signing out other devices

Under Settings → Devices you can see how many other sessions are signed in and close them all at once with Sign out everywhere else. The device you are using stays signed in.

Habits that help

• Use a password that exists only here.
• Sign out on shared computers.
• Never type a code from your authenticator into a page you reached from an email link you did not expect.