# Security and your account log

How Lorx confirms risky actions, and where to see what happened on your account.

## Confirming it's you

Actions that could weaken your account or grant lasting access ask for your password again first:
- making an access token or a runner registration token;
- adding an SSH key that can push;
- changing branch rules;
- deleting a repository.

Lorx remembers the confirmation for a few minutes, so a run of changes asks once.

Tokens can never do these things: only you, signed in on the web, can.

## Your security log

**Settings → Account → Security** lists what happened on your account: sign-ins, devices approved, tokens and keys added or removed, and more, with when and from where.