View and export account activity history

From your account settings, you can view and export account activity history to troubleshoot and monitor user actions. You can also view and export a centralized audit log of login activity and security actions. Learn about the different types of account activity below, and what each export includes.

If you have an Enterprise subscription, learn how you can view and export a more comprehensive centralized audit log of account activity history.

View or export account activity history

Different types of account activity logs include:

• User logins
• HubSpot employee access
• Security activity
• Content activity

For user logins and security activity, you can also view this information in a centralized audit log.

To view or export an account activity log:

• In your HubSpot account, click the settings settings icon in the main navigation bar.
• In the left sidebar menu, navigate to Security. Then, click the Settings & Activity tab.
• In the Activity Logs section, click the name of the activity log you want to view or export.

• • Select View account login history to get a report on when users logged in to your HubSpot account in the last year. The Account Login History report will appear.
    • Click the User dropdown menu on the top left to view the login history of a specific user or all users.
    • Click download Export account login history on the top right to download a CSV file of the Account Login History report.
    • Click Export in the pop-up box to access the CSV file in your email or in the Notifications center. 

• • Select Export HubSpot employee access history to get a report on when HubSpot employees accessed your account in the last 90 days. Click Export on the pop-up box to access the CSV file in your emails or in the Notifications center.
  • Select View security activity history to get a report on notable security actions taken in your HubSpot account in the last year. The Security Activity History report will appear.
    • Click the Account time range dropdown menu on the top left to select a time range for the report.
    • Click the User dropdown menu on the top left to view the security activity of a specific user or all users.
    • Click download Export security activity history on the top right to download a CSV file of the Security Activity History report.
    • Click Export on the pop-up box to access the CSV file in your email or in the Notifications center. 
  • Select Export content activity history to get a report on all modified content in your HubSpot account in the last 90 days. A CSV file will deliver to your email and appear in the Notifications center.

View or export a centralized audit log of login activity and security actions

Super admins can view a real-time centralized audit log of user login activity and security actions. If you have an Enterprise subscription, learn how you can view and export a more comprehensive centralized audit log of account activity history.

To view, filter, and export login activity and security actions on your Audit Logs page:

• In your HubSpot account, click the settings settings icon in the main navigation bar.
• In the left panel, under Data Management, click Audit Logs.
• On the Audit Logs page, you can filter categories, subcategories, actions, and user modifications by clicking the dropdown menus next to each option. You can also filter within a date range.

• Click any row in the table to view a side panel with additional metadata. Click View more information at the bottom of the panel to view the part of the CRM where the user action occurred.
• To export the entire audit log or an audit log based on the selected filters, click Export report. Then, click Export.

Types of account activity

Account login history

Super Admins can view and export the last year of user login history. This includes login attempts to app.hubspot.com and the HubSpot mobile app.

Login history exports contain the following information about each login attempt:

• login timestamp
• user email address
• IP address
• location
• type of login
• user agent (information about the device used for logging in)

In the Type column, view the method that was used for logging in.

• Password login: user logged in using the username and password fields.
• Sign in with Google login: user logged in using Google.
• HubSpot tools login: a HubSpot process, such as a reporting export, was scheduled by this user.
• Two-factor authentication (2FA) login: user logged in using two-factor authentication.
• Single sign-on (SSO) login: user logged in using single sign-on (SSO).
• File transfer protocol (FTP) login with password: user logged in using FTP.
• HubSpot log in code login: user logged in after verifying their login attempt via email.
• Mobile password login: user logged in to the mobile app using the username and password fields.
• Mobile sign in with Google login: user logged in to the mobile app using Google.
• Mobile two-factor authentication (2FA) login: user logged in to the mobile app using two-factor authentication.
• Switch between HubSpot accounts: user switched from one HubSpot account to another.

HubSpot employee access history

By default, HubSpot employees have limited access to your HubSpot account. This allows employees such as your account manager and support specialists to help with your account. Super Admins can export the last 90 days of HubSpot employee access history.

Each export contains timestamps for each instance of employee access, and the department that the employee works in at HubSpot. The following departments may appear in your export:

• Engineering: members of HubSpot's software engineering team. Engineers might enter your account to investigate bugs or unexpected behavior in the HubSpot app.
• Account Management: members of your account management team. Account managers might enter your account to assist during strategy calls or check on your progress and success with HubSpot.
• Services: members of HubSpot's services team, like technical consultants, onboarding specialists, and site migration managers. Services employees might enter your account to assist you or check on the status of services you’ve purchased.
• Customer Support: members of HubSpot's technical support team. Customer support might enter your account to help troubleshoot bugs or help members of your team learn the HubSpot product.
• Sales: members of HubSpot's sales team. The sales team might enter your account during a product demo, or to determine how to help you get the most value from using HubSpot.
• Product/User Experience: members of HubSpot's product and UX teams. Product and UX teams might enter your account to follow up on feedback or questions that you’ve raised about HubSpot functionality.

Security activity history

• Adding, removing, or requiring single sign-on (SSO) or two-factor authentication (2FA)
• Importing acceptance tests
• Exporting contacts or users
• Adding, removing, or impersonating users and admin
• Adding or removing admin permissions
• Deactivating or reactivating users
• Viewing, creating, or deactivating an API key
• Turning email tracking and attachment logging settings on or off 
• Adding or removing email recipients from the Never Log list
• Performing a permanent delete of a contact
• Installing integrations
• Sending manual registration emails or password reset emails
• Creating a payment account and updating information, account changes, or sending payment onboarding links.
•  Creating, syncing, or deleting sandboxes

For each user action, the export will show:

• the time of the action
• the type of action
• the user's email address
• the ID of the affected object
• the approximate location
• a link to the URL where the action was taken in the account

Content activity history

Please note: a CMS Hub Enterprise account is required to export content activity history.

Content activity exports provide a list of content-related actions that users have taken in the account in the last 90 days. Actions include creating, updating, and deleting the following content assets:

• Website pages
• Landing pages
• Blog posts
• Marketing emails
• Email, blog, or web page templates and modules
• Files
• Calls-to-action
• URL redirects
• HubDB

For each action, the export will show:

• The date and time of the action
• The type of object that was created, updated, or deleted
• The type of event, such as PUBLISHED or DELETED
• The name of the asset, such as the file name or page name
• The ID of the object
• The user who committed the action
• The ID of the user
• The updated or deleted HubDB rows