---
title: "Show people their own security log · Agent Wranglers"
url: https://agentwranglers.se/playbook/accounts/sessions-and-security-activity/security-activity-log
updated: 2026-10-20
licence: "All rights reserved"
---

# Show people their own security log

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Recommended
- Chapter: [Sessions and security activity](https://agentwranglers.se/playbook/accounts/sessions-and-security-activity)
- Rule: Keep a log of each person's security events and show it to them in settings for at least 90 days.
- How: Record sign-ins, failed sign-ins, factor and email changes, recoveries, ended sessions, data exports and every staff visit to the account. Store the event, the time, the device label and the approximate place. Never store passwords, tokens or full IP addresses there, as [keep only what you need](https://agentwranglers.se/playbook/website/privacy/data-minimization) asks. Write the log append-only, apart from the session and user tables. Give organisation owners the same view of their members, with a CSV or JSON export. The [security logging rule](https://agentwranglers.se/playbook/adversarial-testing/supply-chain-and-setup/security-logging) covers what operations alert on.
- Check: On a test account, sign in, add a passkey and export data. Settings shows three new events with their times. The log holds no token and no IP address.

Example:

```json
{"time":"2026-11-02T09:15:04Z","user":"u_7c1e","event":"factor.added","factor":"passkey","name":"Work laptop","device":"Firefox on Windows","place":"Gothenburg, SE"}
```

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers accounts playbook: https://agentwranglers.se/playbook/accounts/sessions-and-security-activity/security-activity-log`.

- Previous: [List connected apps and personal tokens](https://agentwranglers.se/playbook/accounts/sessions-and-security-activity/connected-apps)
- [Sessions and security activity](https://agentwranglers.se/playbook/accounts/sessions-and-security-activity)