summaryrefslogtreecommitdiff
path: root/doc/user/profile/unknown_sign_in_notification.md
blob: 9400ead19223184b2e25e3c0cbab18401855ad8f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
# Email notification for unknown sign-ins

When a user successfully signs in from a previously unknown IP address,
GitLab notifies the user by email. In this way, GitLab proactively alerts users of potentially
malicious or unauthorized sign-ins.

There are two methods used to identify a known sign-in:

- Last sign-in IP: The current sign-in IP address is checked against the last sign-in
  IP address.
- Current active sessions: If the user has an existing active session from the
  same IP address. See [Active Sessions](active_sessions.md).

## Example email

![Unknown sign in email](./img/unknown_sign_in_email_v13_0.png)