Authentication logs

Proton Mail provides security features that enable you to view login activity on your account. If you suspect that someone else has access to your account, you can check your login activity in the authentication logs. By default, advanced logs are not enabled. They capture IP addresses and the date and time of activity. The settings for the authentication logs can be changed with the following steps:

1. Log in to mail.proton.me(new window) and go to Settings → All settings → Account→ Security and privacy → Security logs.

2. Toggle the switches to Enable authentication logs and Enable advanced logs (or to disable them). Enabling advanced logs records the IP address for each event in the security log.

Note: If you disable authentication logs, you will clear your entire log history and will not be able to track account activity.

4. You can also perform the following actions:

• Reload: Update the security logs with the latest activity
• Wipe: Delete all activity from the security logs
• Download: Download all activity in the security logs into a CSV file

You can also enable the Proton Sentinel program, which offers advanced account security. It provides you with even more detailed security logs, including the operating system and device that attempted to log in to you account. This feature is available with Proton Visionary, Lifetime, Family, Unlimited, or Business plans.

We recommend the Proton Sentinel program for high-profile public figures, anyone who handles sensitive information, or anyone who thinks they might be at risk for cyberattacks.

Editor’s note: An earlier version of this article erroneously stated that advanced logs are on by default. They are off by default and have always been off by default, as stated in our privacy policy. We apologize for the error.