— go to the documentation home page
SubscriptionFlow documentation

Security Logs

Security logs record account-security events like login verifications and two-factor activity, so you have a record and can spot suspicious behavior.

Available onPro

Documents version1.5.5

Last updated

On this page

What this does

As customers log in, verify codes, and manage 2FA, SubscriptionFlow keeps a log of these security events. It’s a paper trail for peace of mind and for investigating anything unusual.

Why it exists: if a customer reports a problem, or you want to confirm your security features are working, the log gives you the evidence.


Where to find it

Security logging is part of the Security feature set, configured under SubscriptionFlow → Settings → Security. There you can also set the Security Log Retention — how many recent entries to keep.


What gets recorded

Typical events include:

  • Login verification attempts and outcomes.
  • Two‑factor code activity.
  • Security‑related account changes.

The log keeps a rolling number of the most recent entries, based on your Log Retention setting, so it stays useful without growing endlessly.


Tips & Best Practices

  • Set a retention that fits your store. Higher retention keeps more history; lower keeps things lean. A few hundred recent entries suits most stores.

  • Review after enabling 2FA/Turnstile to confirm they’re working as expected.

  • Use logs when investigating access issues — they show what happened and when.

  • Combine with 2FA and Turnstile for layered protection; logs tell you the other two are doing their job.


Frequently Asked Questions

Are security logs available on the Free plan?

No — logging is part of the Pro security features.

Where do I control how much is kept?

In Settings → Security, via the Security Log Retention setting.

Do logs slow down my site?

No. Logging is lightweight, and retention limits keep the log a sensible size.

Can I use logs to investigate a suspicious login?

Yes — they record verification activity so you can see what happened around a given time.

Do the logs store sensitive data like passwords?

No. They record security events (such as verification outcomes), not passwords.

How long are entries kept?

Until they fall outside your retention limit, at which point the oldest entries are cleared.