Auth Log Bundle 4.0: “It wasn't me” now does something
Disavowing a login now revokes the attacker's known contexts, can end every session and force a password reset — automatically, the moment the user reports it.
Read the announcement →News
What each release changes, and what it asks of your application. Subscribe by RSS.
Who logged in as you?
A stolen password is not the failure. What your application does in the minutes after someone says “That wasn't me” — that is the part you control.
Read the announcement →