Security activity

Freesbe keeps a history of what happens to each account: every sign-in, every wrong password or code, every second step, sign-outs, and every change to how the account signs in. Each event shows when it happened, the browser or app it came from, and its address and country, so you can spot something you don’t recognize.

You see your own in Preferences. Owners and admins see everyone in their workspace, in Workspace settings and the Admin Center.

Your security activity

Open Preferences → My account → Security activity.

Each row shows:

• Date and time, in your time zone.
• Event: what happened, like Signed in with a passkey or Authenticator app added. Events worth a second look, like a wrong password or a passkey removed, are in amber.
• Source: the browser and system (Chrome on macOS), or the app (Freesbe for Windows, Freesbe for iOS).
• IP address, with its country in brackets. Hover over it to see roughly where it is.

If you see a sign-in you don’t recognize, change your password and sign out your other sessions.

What’s recorded

Event	When
Signed in	With a password, an emailed code, a passkey, Google, Microsoft or your phone, in the app or the Admin Center.
Sign-in failed	Someone typed the wrong password for your email address.
Two-step verification	You confirmed a sign-in with an authenticator app, a passkey, an emailed code or your password.
Two-step verification failed	A wrong code or password at the second step.
Signed out	You signed out, or signed out another session, or all your other sessions.
Password set or changed
Email changed	Shows the new address.
Authenticator app added or removed
Passkey added or removed	Shows the passkey’s name.
Google or Microsoft linked or removed

Events are kept for a year. Deleting your account deletes them too.

Filter and export

Above the list:

• All events narrows it to one kind of event, like Sign-in failed.
• Last 12 months narrows it to one month.
• Export filtered saves what the filters show as a CSV file, up to the newest 5,000 events. It opens in Excel, Numbers or Google Sheets.

Your team’s security activity

Owners and admins open Workspace settings → Security & compliance → Security activity, or the same page in the Admin Center at manage.freesbe.net.

It has a Member column and a member filter, and shows each member’s activity only from when they joined the workspace: what they did before joining, or in another workspace’s sign-in, isn’t yours to see. Export filtered adds each member’s name and email to the file.

Things to look for:

• Sign-in failed several times on one account, especially from a country your team isn’t in. Ask the person to change their password and add a passkey or an authenticator app, or require a second step for everyone.
• Passkey removed or Authenticator app removed that the person didn’t do.
• Sign-ins from a new country.

What admins change in the workspace itself, like settings, roles and invites, is in the audit log instead.

In the API

GET /api/me/security-activity returns your own events, and admins can read their members’ with GET /api/workspaces/{w}/security-activity. Both take the same filters as the page; see the API reference.