You can review your account's security log to better understand the actions you've performed in the last 90 days.

Accessing your security log

The security log lists the last 50 actions or those performed within the last 90 days.

  1. In the upper-right corner of any page, click your profile photo, then click Settings. Settings icon in the user bar
  2. In the user settings sidebar, click Security. Security settings sidebar

  3. Under "Security history," your log is displayed. Security log

  4. Click on an entry to see more information about the event. Security log

Understanding events in the security log

Actions listed in the audit log are grouped within the following categories:

Category Name Description
account_recovery_token Contains all activities related to adding a recovery token
billing Contains all activities related to your billing information.
oauth_access Contains all activities related to OAuth applications you've connected with.
payment_method Contains all activities related to paying for your GitHub plan.
profile_picture Contains all activities related to your profile picture.
project Contains all activities related to project boards.
public_key Contains all activities related to your public SSH keys.
repo Contains all activities related to the repositories you own.
two_factor_authentication Contains all activities related to two-factor authentication.
user Contains all activities related to your account.

A description of the events within these categories is listed below.

The account_recovery_token category

Action Description
confirm Triggered when you successfully store a new token with a recovery provider.
recover Triggered when you successfully redeem an account recovery token.
recover_error Triggered when a token is used but GitHub is not able to validate it.

The billing category

Action Description
change_billing_type Triggered when you change how you pay for GitHub.
change_email Triggered when you change your email address.

The oauth_access category

Action Description
create Triggered when you grant OAuth access to a third-party application.
destroy Triggered when you revoke OAuth access to a third-party application.

The payment_method category

Action Description
clear Triggered when a payment method on file is removed.
create Triggered when a new payment method is added, such as a new credit card or PayPal account.
update Triggered when an existing payment method is updated.

The profile_picture category

Action Description
update Triggered when you set or update your profile picture.

The project category

Action Description
create Triggered when a project board is created.
rename Triggered when a project board is renamed.
delete Triggered when a project board is deleted.

The public_key category

Action Description
create Triggered when you add a new public SSH key to your GitHub account.
delete Triggered when you remove a public SSH key to your GitHub account.

The repo category

Action Description
access Triggered when you a repository you own is switched from "private" to "public" (or vice versa).
add_member Triggered when a GitHub user is invited to have collaboration access to a repository.
add_topic Triggered when a repository owner adds a topic to a repository.
create Triggered when a new repository is created.
destroy Triggered when a repository is deleted.
disable Triggered when a repository is disabled (e.g., for insufficient funds).
enable Triggered when a repository is re-enabled.
remove_member Triggered when a GitHub user is removed from a repository as a collaborator.
remove_topic Triggered when a repository owner removes a topic from a repository.
rename Triggered when a repository is renamed.
transfer Triggered when a repository is transferred.
transfer_start Triggered when a repository transfer is about to occur.

The two_factor_authentication category

Action Description
enabled Triggered when two-factor authentication is enabled.
disabled Triggered when two-factor authentication is disabled.

The user category

Action Description
add_email Triggered when you add a new email address.
create Triggered when you create a new user account.
remove_email Triggered when you remove an email address.
rename Triggered when you rename your account.
change_password Triggered when you change your password.
forgot_password Triggered when you ask for a password reset.
login Triggered when you log in to GitHub.
failed_login Triggered when you failed to log in successfully.
two_factor_requested Triggered when GitHub asks you for your two-factor authentication code.
show_private_contributions_count Triggered when you publicize private contributions on your profile.
hide_private_contributions_count Triggered when you hide private contributions on your profile.