Auth Audit Logs

Monitor and track authentication events with audit logging.

Auth audit logs provide comprehensive tracking of authentication events in your Supabase project. Audit logs are automatically captured for all authentication events and help you monitor user authentication activities, detect suspicious behavior, and maintain compliance with security requirements.

What gets logged#

Supabase auth audit logs automatically capture all authentication events including:

• User signups and logins
• Password changes and resets
• Email verification events
• Token refresh and logout events

Storage options#

By default, audit logs are stored in two places:

1. Your project's Postgres database - Stored in the auth.audit_log_entries table, searchable via SQL but uses database storage
2. External log storage - Cost-efficient storage accessible through the dashboard

You can disable Postgres storage to reduce database storage costs while keeping the external log storage.

Configuring audit log storage#

1. Navigate to your project dashboard
2. Go to Authentication
3. Find the Audit Logs under Configuration section
4. Toggle on "Disable writing auth audit logs to project database" to disable database storage

Log format#

Audit logs contain detailed information about each authentication event:

1
2
3
4
5
6
7
8
9
10
{  "timestamp": "2025-08-01T10:30:00Z",  "user_id": "uuid",  "action": "user_signedup",  "ip_address": "192.168.1.1",  "user_agent": "Mozilla/5.0...",  "metadata": {    "provider": "email"  }}

Log actions reference#

Limitations#

• There may be a short delay before logs appear
• Query capabilities are limited to the dashboard interface