How to Review Your Security Activity Log
Monitor all security-related events on your account including logins, changes, and withdrawal attempts.
The activity log is the account's own record of sign-ins, security changes and withdrawals, with time, device and location attached. Most of it will be you. The value is in noticing the entry that is not — and noticing it early, while a session can still be revoked and a withdrawal rule still tightened. Two minutes a month is the whole commitment, and the pattern you are looking for is simple: an entry whose device, time and location you cannot account for.
Before you start
- Nothing beyond access to the account. The log is read-only and costs nothing to check.
Access the Activity Log
Navigate to Profile > Security > Security Activity. This comprehensive log records all security-relevant events: logins, failed login attempts, 2FA changes, password resets, withdrawal requests, API key actions, and device trust changes.
Review Recent Activity
Each entry shows the event type, timestamp, IP address, device information, and location. Scroll through recent entries to verify all activity was initiated by you. Pay special attention to login events from unfamiliar locations or devices.
Investigate Anomalies
If you spot unrecognized activity, take immediate action: revoke unfamiliar sessions, change your 2FA method, and review your withdrawal whitelist. Contact Midas support if you believe your account has been compromised.
Set Up Activity Alerts
Enable push notifications and email alerts for security events in your notification preferences. This ensures you are immediately informed of any logins, security changes, or withdrawal attempts, even when you are not actively using the app.
If something goes wrong
- A location you have never visited appears against your own sign-in.
- Location is inferred from the network address and mobile carriers routinely place people in another city or country. Judge by device and time first, and only treat it as hostile if those do not match either.
- You see a change you did not make.
- Revoke every other session, rotate 2FA, register a passkey, and confirm the withdrawal whitelist is still only addresses you recognise — in that order.
- The log shows activity from an app you no longer use.
- API keys and third-party integrations appear here too. Revoke any key you do not recognise from the API settings, then re-check the log.
Frequently asked questions
- How far back does the log go?
- Far enough to cover the period that matters for an investigation. If you need a longer record for tax or accounting, export from the wallet history rather than the security log.
- Can I be alerted instead of checking?
- Yes — enable activity alerts so sign-ins and security changes arrive as push or email at the time they happen.
- Does the log show failed attempts?
- Yes, and a run of failures against your account is worth acting on even though none of them succeeded.
- Can I export the log?
- Where an export is offered, yes — useful if you are reporting an incident and need a record outside the account.
- Does the log record withdrawals?
- Security-relevant events including withdrawal authorisations appear here; the full financial record lives in the wallet history.