Security and account
Recent activity
See sign-ins and security changes on your account, so you can spot anything that was not you.
Under Settings, Recent activity GrailVault lists what has happened on your account, newest first, so you can spot a sign-in that was not you.
#What is listed
| Event | When it appears |
|---|---|
| Account created | You signed up. |
| Signed in | A sign-in with your master password. |
| Signed in with the browser extension | The extension signed in. |
| Signed in with device unlock | You used Windows Hello, phone unlock, Face ID or Touch ID. |
| Wrong password or code entered | Someone tried a wrong master password or authenticator code. Shown in amber. |
| Locked for 15 minutes | Five wrong attempts in a row. Shown in red. |
| Master password changed | You changed it in Settings. |
| Master password reset with the recovery key | You used the recovery key. |
| Recovery key created | You made a new recovery key. |
| Two-factor sign-in turned on or off, new backup codes | Changes to two-factor authentication. |
| Device unlock added or removed | Changes to device unlock. |
| A device was signed out, all other devices were signed out | You used Active sessions. |
| Payment received | A payment for your plan was recorded. |
Each line shows the browser and system, the IP address it came from, and how long ago it happened.
#What to do if something is not you
- Open Where you're signed in and choose Sign out all other devices.
- Change your master password.
- If two-factor sign-in is off, turn it on.
A few "Wrong password" lines are normal: people mistype. A burst of them from an address you do not know, or a "Locked for 15 minutes" line you did not cause, means someone is guessing. A strong master password makes guessing hopeless, and the lock stops them in the meantime.
#What is recorded, and for how long
Only the kind of event, the time, the IP address and the browser. Never your passwords, item names or any vault contents. The newest 500 events from the last 180 days are kept. They are visible to you only, and they are erased when you delete your account.