🔐 Security & Login Activity

The Security tab gives Admins visibility into who is signing in to the clinic account — from where, on what device, and when — plus control over active sessions. It's how you keep patient data protected and spot anything unusual.

Accessible by: Admin only (Settings → Security)

---

Opening the Security Tab

1. Click Settings in the sidebar.
2. Open the Security tab.

The Security tab is visible only to Admins.

---

Login Activity

Every sign-in attempt is recorded so you always have a trail. Each entry includes:

• Event type — successful login, failed login, or a password-reset request/completion
• Team member — who the event belongs to
• Device — desktop, mobile, or tablet
• Date & time — when it happened
• Location / IP — where the sign-in came from, where available

Filtering the Activity Log

Use the filters to narrow the list down to what you're looking for:

• By event type (e.g. only failed logins)
• By date range
• By team member

This makes it easy to answer questions like "were there any failed logins this week?" or "when did Dr. Shah last sign in?"

---

Active Sessions

The Active Sessions view shows where accounts are currently signed in. Use it to confirm sessions look expected and to spot a sign-in you don't recognise.

---

Why This Matters

• Accountability — every sign-in is tied to a specific team member.
• Early warning — repeated failed logins or an unfamiliar device or location are easy to catch.
• Peace of mind — combined with role-based access, you always know who can get in and who actually did.

---

Tips

• Check the activity log periodically — a quick scan for failed logins or unfamiliar locations takes seconds.
• If something looks wrong, review the team member's role in Team Management and ask them to sign in again.
• Patient data is encrypted in transit and at rest; the Security tab adds visibility on top of that protection.