Access Log by medialab records who connects to your Jellyfin server, when, from where and from which app and device, so you can spot shared passwords, unknown devices and login attempts.
What it does
- Events: successful sign-ins, wrong passwords (never the password tried), sessions opened and closed, IP changes during a session, and optionally playback starts.
- For each event: user, time, IP address, app and its version, device name and id, country, region, city and internet provider (ASN).
- Known devices per user: first and last connection, number of sessions, latest addresses.
- Summary by user and country, and the addresses with wrong passwords; filters and CSV export.
- Alerts in the Jellyfin activity log: a new device, a new country for a user, repeated wrong passwords from the same address.
- Location from a local GeoLite2 database (free MaxMind account), updated automatically. IP addresses are never sent to an outside service.
Requirements
- Jellyfin Server 12.2 or newer.
- A free MaxMind account and licence key for the GeoLite2 City and ASN databases (without it, events are recorded without location).
Privacy
The data are personal (IP addresses, locations, devices) and stay on your server, in the plugin's data folder; events are kept for a configurable number of days. Keep them only as long as you need and tell the users of your server that access is logged.
Frequently asked
How do I see who logged in to my Jellyfin server? Install Access Log; from then on every sign-in, failed attempt and session appears in Dashboard → Access Log → Activity, with the IP address, location, app and device. See the guide.
Can it warn me about a new device or country? Yes. Alerts for a new device, a new country and repeated wrong passwords go to the Jellyfin activity log; during the first day after installation devices and countries are learned without alerts.
Licensing
The plugin is open source (GPL-3.0), like Jellyfin itself. What you buy is the subscription for builds, updates and support for one Jellyfin server: ready-to-install releases through your private plugin repository, every update while the subscription is active, and help when something does not work. The plugin checks the subscription key once a day; without a valid subscription it stops until you renew (nothing is deleted). Monthly, yearly or lifetime (lifetime includes one year of updates), or included in the Jellyfin bundle. 30-day free trial.
Source code. For every release, the complete corresponding source code is downloadable from your account (Account → Licences, Source code) next to the build, under the same rules as the build, and each archive contains the full GPL-3.0 text (LICENSE). If you need the source of a version you can no longer download, ask us and we send it. See section 10 of the EULA.