While a bot/user account would ideally never have it's authentication data leaked/guessed, it would be nice to have the ability to verify that your account is in fact only being accessed by you.
The user should be able to access a list of IP addresses which have logged into the account, and at what time they logged in, within the user preferences. Each item in the list should have a report button, which could be used to report suspicious activity, as well as a button which can be used to log out active sessions, which could be used if you lost your device.
Bots should have similar lists under the bot's profile in the developer portal.
Please sign in to leave a comment.