In the docs
Security and your account log
How Lorx confirms risky actions, and where to see what happened on your account.
For agents: this page as MarkdownConfirming it's you
Actions that could weaken your account or grant lasting access ask for your password again first:
- making an access token or a runner registration token;
- adding an SSH key that can push;
- changing branch rules;
- deleting a repository.
Lorx remembers the confirmation for a few minutes, so a run of changes asks once.
Tokens can never do these things: only you, signed in on the web, can.
Your security log
Settings → Account → Security lists what happened on your account: sign-ins, devices approved, tokens and keys added or removed, and more, with when and from where.