Login alerts
Login alerts
Last verified: 2026-06-16.
A login alert tells you when your account was signed in to, so an unexpected sign-in is something you notice quickly. Email login alerts are free.
What an alert contains
- The time of the sign-in.
- The method used (password + 2FA, passkey, external login, or application password).
- The approximate location, based on the IP address. Location is always labelled as approximate — IP-based geolocation is not exact.
- The IP address and a short device description when available.
An Awthy alert will never ask for your password or a one-time code, and never contains them. If a message claiming to be from Awthy asks for credentials, treat it as phishing.
"This was me" / "This wasn't me"
If the sign-in was you, no action is needed. If it was not, the alert links you back to your site to secure the account — change your password, review active sessions, and check your recovery options.
Enable or disable alerts
Go to Awthy Security → Notifications:
- Toggle Email alerts on or off for your own account.
- Choose how often you are alerted:
- Every login — an alert for every sign-in.
- New device or location only — the default; you are only alerted when the sign-in is from a device you have not trusted or a location not seen before.
Administrators can set a starting default per role, but your own choice always wins.
When location is shown
In the first release, alerts show the IP address and device. Approximate city/country location is added once the geolocation database is configured (see the anomaly-detection setup). Until then, the alert omits the location line rather than guess.