Login Audit and Device Access Control
Two apps for sign-in security.
- Login Audit (free) records every sign-in attempt with user, IP address, browser, operating system and device type. Failed attempts stand out, and the first sign-in from a new IP or a new browser is flagged.
- Device Access Control ($299, one-time) lets chosen users sign in only from computers and browsers you registered, on every sign-in path: the login page, JSON-RPC and XML-RPC, passwords and API keys. A stolen password alone no longer opens their account.

Which one do I need?
| Login Audit | Device Access Control | |
|---|---|---|
| History of every sign-in attempt with IP, browser and device | ✓ | ✓ |
| Failed sign-ins with the reason | ✓ | ✓ |
| New IP and new browser flags, statistics | ✓ | |
| Restrict chosen users to registered devices | ✓ | |
| Registration codes, sign out lost devices at once | ✓ | |
| Enforced on the login page, JSON-RPC and XML-RPC | ✓ |
Start with Login Audit to see who signs in from where, then restrict the accounts that matter. Both install side by side: sign-ins refused by Device Access Control appear in Login Audit with the reason.