Review active login sessions and account activity history.

Use the activity panel to review a summary of active login sessions, and a 90-day history of account activity related to logins, account permissions, website(s), domain(s), and account settings. The activity panel is a great tool to use to check for suspicious activity on your account.

This guide reviews how to access the activity panel and what it includes.

Access the activity panel

Follow the steps to access the activity panel:

1. Open your account dashboard.
2. In the top-right corner, click Account settings.
3. Click Activity.

Review recent sessions

Use the Recent Sessions section of the panel to review a summary of all active login sessions for your account, and spot any suspicious logins from devices you don’t recognize.. Active sessions stay open for 30 days unless the person who was logged into your account logs out of Squarespace, or you force them to log out remotely.

The Recent Sessions tracks:

• Browser
• IP address
• Date and time of first login for that session
• Location (if labeled "Unknown," that means we were unable to retrieve the location data)

In the Recent Sessions section:

• Your current session has a green This device label next to it.
• First Login is when the session started.
• When you log in from a new device or browser, it’s recorded as a new session.

Force a log-out

To force a device to log out, click Logout Session in the Recent Sessions section next to the device details. The next time you try to log in from that device, you’ll need to enter your login details again. Deleting a login session is a good idea if you logged in from a public computer, or if you suspect that an IP address is an unauthorized user.

Note:

Deleting a login won't automatically log users out of the Squarespace app. You can force an app to log out of your account in the Connected Apps panel.

Review your account activity history

The Activity History section is organized into five separate tabs that track past events for each activity and the details of the event:

• Login - attempts and successful logins for your website and Acuity Scheduling account
• Domains - changes to DNS records and nameservers
• Websites - creation of websites, domain purchases made through a website, and domains connected to websites
• Settings - changes to your account email address, log in type, two-factor authentication, password resets made while logged out of your account
• Permissions - additions and removals of website and domain contributors

Note:

The Domains, Websites, and Permissions tabs in Activity History only display for site owners, site administrators, and domain managers, but show actions taken by all contributors.

The Past events section doesn't track:

• Addresses
• Contributor logins
• Specific site edits

I don’t recognize this account activity

If there’s activity on your account that you don’t recognize, there are steps you can take to ensure your account remains secure:

• Change your password
• Set up two-factor authentication
• Remove contributors - if a domain or website contributor takes an action you don’t recognize
• Cancel website - if you don’t recognize a website
• Cancel domain registration - if someone registered a domain on your account