2026-08-26 - Account sign-in emails ​

System security emails for a successful sign-in and for a failed sign-in attempt. No web client or frontend-core package update in this release.

← All releases

Added ​

• «New account sign-in» email - after a successful sign-in (web or mobile app), the account email receives a notice. The message includes device (browser / OS or the client device name), IP address, time in UTC, and a password-recovery link if the sign-in was not you.
• «Attention! Failed sign-in attempt» email - if the password is wrong for an existing email, the account receives a warning with the same technical details and a clear call to change or recover the password.
• Collapsed failed-sign-in emails - the first failure sends immediately. Further failures within a 15-minute window do not send a separate email each time: attempts are counted, and the next email after the window states how many attempts happened after the previous notice. A successful sign-in resets the window.
• These emails cannot be turned off in settings: they are account-security notifications (not a substitute for brute-force protection on the login form).

Changed ​

• Timestamps in sign-in emails are shown in UTC (zero meridian), the same as in the system, with no shift to the user's local timezone.