Your activity log records logins, password changes, 2FA changes, and most other account-level events. Here's what the labels and filters on that page actually mean, including one filter that doesn't do what its own label says.
Every entry shows a short, readable label — "Signed In," "Password Reset," "2FA Enabled," and so on. That's a translation of the same raw internal record; if you hover over an entry, a tooltip shows the original underlying text. This isn't a leak — it's there on purpose for anyone who wants to see exactly what was recorded, without cluttering the default view with internal wording.
Every entry gets classified into one of three color-coded types, computed fresh from the record's text each time the page loads rather than stored ahead of time: Failed (red — a failed login, something blocked or denied), Success (green — a successful login, a verified email, a password reset), and Access (blue) — the catch-all for everything else. Because it's a catch-all, most of your account's real activity — device changes, group changes, billing changes — lands under Access, not a narrower category of its own.
The date-range dropdown defaults to "Last 24-Hours," and the 7-day, 30-day, and 90-day options next to it work as you'd expect — each one narrows the list to entries within that window. The "Last 24-Hours" option does not: selecting it shows every loaded entry regardless of how old it is. On an account with light recent activity, that means the default view can show entries from weeks or months back, not just the last day, even though the selected option says otherwise. If you want an actually time-bounded view, use 7, 30, or 90 days instead of the default.
The page fetches your 300 most recent activity entries in a single request when it loads. The type badges, the date range, pagination, and CSV export all work by filtering and paging through that already-loaded batch in your browser — none of them go back to the server for more. One practical consequence: on a very active account, 300 entries can be used up by recent activity alone, so selecting "Last 90 Days" won't necessarily show a full 90 days of history if there's enough recent activity to fill the batch first.
The CSV export button downloads every entry matching your currently active type and date filters, across the whole loaded batch — not only the entries visible on your current page. The exported Action column contains the same clean label shown on screen, not the raw internal text.
The time zone dropdown in the toolbar controls what every timestamp on this page is shown in. Picking a new one saves immediately — there's no separate save button — and the page reloads so every visible entry updates to the new time zone at once, not just the selector itself. This is a personal setting, not an account-wide one: each team member sets their own, and it only affects what they see.
This page shows only the activity of whoever is currently logged in. A team member sees their own actions and nothing else — not the account owner's login history, and not another team member's activity — regardless of role.