Skip to main content

Security Analytics (Customer Auth Failures)

đź“Ť How to get here:

  1. Click on the Settings gear icon in your navigation menu.
  2. Select Organization Settings.
  3. Look at the left sidebar and click on Security & Access.

At the bottom of the page, you'll find a highly detailed dashboard monitoring Customer Auth Failures. Think of this as your security camera—it watches the login, signup, and password reset pages for suspicious activity.

(Image: Security Analytics Charts) Security Analytics

What it tracks:​

The system automatically tracks failed login attempts (like 401 unauthorized errors, 429 rate-limiting blocks, and Cloudflare Turnstile captcha failures). It keeps a rolling 30-day record of this data.

You can view these failures over different time periods (7 days, 30 days) and filter by hour or day. The chart specifically breaks down:

  • Bad Password: Someone tried to log in but typed the wrong password.
  • Unknown User: Someone tried to log in with an email address that doesn't exist in your system.
  • Rate-Limited: Someone (or a bot) tried to guess passwords too many times too fast and got temporarily blocked.
  • Turnstile Fail: A bot failed the invisible captcha check.

Top Offending IPs​

If you scroll to the bottom, the platform identifies the exact computers (IP addresses) that are failing the most. To protect privacy, the IP addresses are mathematically scrambled (hashed using SHA-256), but you can clearly see the failure counts to identify if a specific machine is maliciously attacking your login page!

💡 Quick Tip: If you ever see a massive spike in "Rate-limited" or "Unknown user" failures on the chart, it might mean a bot is trying to guess passwords. Don't panic—the system is catching and blocking them, but you might want to ensure Maintenance Mode or 2FA are ready if needed!