Activity log: monitoring account access

Cleanbox logs account activity to help you detect unauthorized access. The activity log shows when and from where your account was accessed.

Where to find the activity log

1. Go to Settings
2. Scroll to the Activity section

What is logged

Each entry shows:

• Timestamp — When the action occurred (in your configured timezone)
• Action — What happened (login, settings change, etc.)
• IP address — The network address used

Spotting suspicious activity

Review your activity log if:

• You receive a notification about a login you did not perform
• Your settings or aliases have changed unexpectedly
• You see logins from IP addresses or locations you do not recognize

What to do if you see unauthorized access

1. Change your password immediately — Settings → Password
2. Enable two-factor authentication — Settings → 2FA. This prevents future unauthorized logins even if your password is compromised.
3. Review your aliases and filters — Check that no aliases were created, disabled, or modified by the attacker
4. Check your mailbox connections — Ensure no unauthorized mailboxes were added