Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Security Events

Each user profile has a Security Events view listing MFA activity with timestamps and IP addresses:

  • Enrolments

  • Successful and failed verifications

  • Lockouts

  • Resends

  • Administrative reset

Events are kept for 90 days and can be filtered by date.

This is the first place to look if something appears wrong. A run of failed attempts from one unfamiliar IP address suggests someone is targeting that account; failures spread across many addresses usually means something else.

Last updated