---
key: new-sign-in-alert
title: Check a new sign-in alert
audience: customer
section: portal/messages
routes: ["/portal/security"]
since: 0.0.1
updated: 0.0.1
status: published
summary: What the "New sign-in to your account" and "Your sign-in settings changed" emails mean, and what to do if it was not you.
keywords: [new sign-in, security alert, someone signed in, suspicious login, new device, sign-in settings changed, passkey added]
related: [see-where-you-are-signed-in, change-your-portal-password, turn-on-two-step-verification-in-the-portal]
---

The portal emails you when your account is used in a way worth knowing about. "New sign-in to your account" arrives when someone signs in to your portal account. "Your sign-in settings changed" arrives when something about how you sign in changes, for example a passkey was added. Both come from the company's name and are about your portal account with that company.

## Steps

1. Read the details. A new sign-in email shows how you signed in and the browser or app used.
2. If it was you, there is nothing to do.
3. If it was not you, use the email’s “Review account security” button. Sign in if asked, choose your customer account if you have more than one, and change your password straight away. See [[change-your-portal-password]].
4. Then, under **How you sign in**, select **Sign out everywhere** and remove any device you do not recognise. See [[see-where-you-are-signed-in]].
5. Turn on a second sign-in step so a password alone is not enough. See [[turn-on-two-step-verification-in-the-portal]].

## What you see

- A settings email has one line for each change, for example "A passkey was added to your account."
- New sign-in emails come at most once an hour for the same device and place, so signing in several times in a row does not flood your inbox.

## If something looks different

- If you ignore the email, nothing happens. It is only a notice.
- The footer identifies the company and offers a contact link, with a small “Powered by NovaBMP” credit below.
- You cannot sign in to change your password: use **Forgot password?** on the sign-in page, then contact the company. See [[get-back-into-the-portal]].
- These security emails protect your account, so opting out of reminders does not stop them.