Review administrator login history

Open **Reports > Security Reports > Admin Login Logs**. This is administrator/staff sign-in history. A client’s own login sessions are reviewed from that client record instead.

Review sign-in activity

1. Set **Date range**, **Admin**, and session **Status** as needed. Available states include Active, Revoked, and Expired.

2. Review Session status, Staff, Device, **IP & Country**, Activity, and Authentication.

3. Inspect sign-in and last-seen times; hovering relative times reveals the detailed time where available.

4. Compare an unfamiliar device or IP with the staff member’s known activity through your approved process. A changed network address alone does not establish account compromise.

5. Refresh and inspect additional pages before deciding which session to revoke.

Sign out a session

Use **Sign out session** for an eligible active row. Read **Sign out selected session?** and confirm **Sign out**. The revoked session remains in login history. Permission to view logs and permission to revoke another staff member’s session are separate.

The current row can be marked **This session**. **Sign out this session** logs you out of the admin workspace after confirmation. Save other work and ensure you can authenticate again before choosing it.

If the page reports **Session management unavailable**, this workspace does not currently expose the management data; an empty result is not proof that no sign-ins occurred. Check filter scope and access for other empty states. Keep staff IP/device details private, and use your established security-response process for a verified incident.