In the docs

Security and your account log

How Lorx confirms risky actions, and where to see what happened on your account.

For agents: this page as Markdown

Confirming it's you

Actions that could weaken your account or grant lasting access ask for your password again first:

  • making an access token or a runner registration token;
  • adding an SSH key that can push;
  • changing branch rules;
  • deleting a repository.

Lorx remembers the confirmation for a few minutes, so a run of changes asks once.

Tokens can never do these things: only you, signed in on the web, can.

Your security log

Settings → Account → Security lists what happened on your account: sign-ins, devices approved, tokens and keys added or removed, and more, with when and from where.