Account Protection History Audit log

Action

Description

Shows in Account Protection History

Send Email Alert

Signed in

This means a successful sign-in was completed for the account.

✅ Yes

❌ No

Signed out

This means the user signed out of their account.

✅ Yes

❌ No

Password Changed

This means the account password was successfully updated.

✅ Yes

✅ Yes

Password reset requested

This means someone started the password reset process, usually by requesting a reset email or link. It does not mean the password was changed yet.

✅ Yes

✅ Yes

MFA Enabled

This means multi-factor authentication was turned on for the account, adding an extra layer of security during sign-in.

✅ Yes

✅ Yes

MFA Disabled

This means multi-factor authentication was turned off for the account.

✅ Yes

✅ Yes

Backup Codes Regenerated

This means a new set of backup codes was created. Any older backup codes are no longer valid after this happens.

✅ Yes

✅ Yes

Multi-factor authentication challenge issued

This means the system asked for a multi-factor authentication code as part of sign-in or another protected action.

✅ Yes

❌ No

Multi-factor authentication challenge invalidated

This means a previously issued multi-factor authentication challenge was canceled, expired, or made unusable before it was completed.

✅ Yes

❌ No

Multi-factor authentication succeeded

This means the user successfully completed the multi-factor authentication step.

✅ Yes

❌ No

Backup code used for multi-factor authentication

This means one of the account’s backup codes was used instead of a standard authentication code.

✅ Yes

✅ Yes