Account Activity Log

The activity log is a running list of everything that's happened on your account - sign-ins, password changes, 2FA changes, SSH key edits, email changes, profile updates. It's the first place to look if you ever wonder "did I do that?"

The log only shows actions on your own user account. Things your teammates do (creating a server, admin issuing a credit, etc.) live on the organization's own activity feed, not here. Internal admin actions don't show up either.

1. In the sidebar, find your profile button at the bottom - it shows your avatar, name, and email.

2. Click your profile button. A small menu opens upward.

3. Click Settings. The Account Settings page opens.

4. Along the top of the page, click the Activity tab.

The page loads with the newest entries at the top, ten per page.

Each row in the feed has four pieces of information laid out left to right:

• Action: a short plain-English label like "Signed in", "Password changed", or "SSH key added".
• Detail: extra context, when there is any. For sign-ins this is the browser and device (parsed from your browser's user-agent). For SSH key changes it's the key's name. For email changes it shows the old address and the new address.
• Time: when it happened, shown in your local timezone.
• IP address: the IP address the action came from, when one was recorded.

Two filter controls sit just above the feed.

• Search box (on the left): type a word and the feed filters to only rows that contain that word in either the Action label or the Detail text. Clear the box to remove the filter.
• Date range (pill tabs on the right): five small tabs labeled All, 1h, 1d, 1w, 1m. Click one to show only entries from inside that window. All shows everything; 1h is the last hour; 1m is the last month.

The two filters work together. For example, typing sign in the search box and clicking 1w shows every sign-in (and anything else with "sign" in the name) from the past week.

If you have more than ten entries, pagination controls appear at the bottom of the feed:

• On the left: a range like "11–20 of 47" telling you which entries you're looking at and the total count.
• On the right: the page number and chevron buttons for stepping backward and forward through pages.

Whenever you change the search box or the date range, you jump back to page one automatically.

If you spot a sign-in from a place you've never been, an SSH key you didn't add, or an email-change request you didn't make, treat it as a possible account takeover. In this order:

1. Change your password right away: see Changing Your Password.
2. Sign every other device out: see Signing Out Other Devices.
3. If you don't have two-factor authentication on yet, turn it on: see Setting up 2FA.

The portal also sends a "Your email was changed" alert and "New sign-in" notifications by email for exactly this reason.