Authentication logs

Proton Mail provides security features that enable you to view login activity on your account. If you suspect that someone else has access to your account, you can check your login activity in the authentication logs. By default, detailed events are not enabled. They capture IP addresses and the date and time of activity. The settings for the authentication logs can be changed with the following steps:

1. Log in to mail.proton.me(new window) and go to Settings → All settings → Account→ Security and privacy → Security events.

2. Toggle the switches to Enable authentication logs and Enable detailed events (or to disable them). Enabling detailed events the IP address for each event in the security events.

Note: If you disable authentication logs, you will clear your entire log history and will not be able to track account activity.

4. You can also perform the following actions:

• Reload: Update the security events with the latest activity
• Wipe: Delete all activity from the security events
• Download: Download all activity in the security events into a CSV file

You can also enable the Proton Sentinel program, which offers advanced account security. It provides you with even more detailed security events, including the operating system and device that attempted to log in to you account. This feature is available with Proton Visionary, Lifetime, Family, Unlimited, or Business plans.

We recommend the Proton Sentinel program for high-profile public figures, anyone who handles sensitive information, or anyone who thinks they might be at risk for cyberattacks.

Editor’s note: An earlier version of this article erroneously stated that detailed events are on by default. They are off by default and have always been off by default, as stated in our privacy policy. We apologize for the error.