# Who signed in: and what each of them changed

URL: https://www.orla.finance/en/product/space/security
Markdown twin of that page. Append `.md` to any Orla page URL to get one.

Money and rules ask who you are again before they move, and nothing changes in the space without a name on it.

## How it works

- **A journal of every change.** Who did it, person or machine, what it touched, and the before and after. Owners and admins export any period as a file, and a range too big is refused rather than cut short.
- **A second factor before money.** Approving a payment, editing a signing rule or changing a payee's bank details asks again who you are, with a fresh code or your passkey. One confirmation holds for fifteen minutes in that tab.
- **Every session, and Not me.** Each device shows its address and when it signed in. A sign-in from a new device asks It was me or Not me, and Not me signs that device out.
- **What each role opens.** A member sees their own devices. The journal and the allowed networks belong to owners and admins, and a new sign-in email for one of them waits like any loosening.

## Questions

**What if someone gets my password?** With a second factor on, a password alone does not sign in. A new device shows up with It was me or Not me, and Not me ends its session on its next request.

**Can we lock the space to our office?** Yes, on Scale and Enterprise. Owners and admins set the networks that may open the space. If your own list locks you out, an emailed link opens a thirty minute door.