Skip to main content
Login history records every sign-in attempt on your account, both the ones that worked and the ones that did not. It sits in your account’s Security section, under Login history.

​
What each attempt records

The list is paginated, newest first, and shows the range you are viewing against the total.

​
Results

The three blocked results are the useful ones. Blocked: suspicious in particular means someone had your password: it was accepted, and only the risk check stopped the sign-in.

​
When something looks wrong

A Failed row you do not recognize is someone guessing. A Failed: wrong 2FA code or Password accepted, 2FA not completed row you do not recognize means someone has your password: change it. A Successful row you do not recognize is someone who got in. For the second, change your password, which ends every other session, browser and CLI alike, then check Active sessions and revoke anything left. Turning on 2FA stops a stolen password being enough on its own.
Meridian evaluates risk after your credentials are accepted, so a correct password on a new device, from a new country, or at an unusual hour can still be stopped. See Suspicious sign-ins for the signals and how to approve one.
Last modified on October 8, 2026