Login Activity Log + 2FA Reminder (Lite)

See who logged in, from where, and when — then nudge your team to enable two-factor authentication. No enforcement, no blocking, just visibility and a gentle push toward better security hygiene.

Baseline security visibility, without Enterprise

Community Edition gives admins very little visibility into login activity — no easy way to see who logged in, from where, or when, without digging through server logs. Odoo already ships native two-factor authentication, but nothing nudges the users who haven't turned it on. This module closes both gaps using Odoo's own native login flow and auth_totp state — no new authentication mechanism, no external service.

Feature overview

Everything you need for baseline login visibility and a gentle 2FA rollout push.

Login Activity Log

Every login attempt recorded: user, timestamp, IP, and outcome
Failed attempts visually highlighted in red, successes in green
Per-user smart buttons: total logins and failed attempts in the last 24 hours
Admin-configurable retention so the log never grows unbounded

2FA Adoption Dashboard

Reads native auth_totp state directly — nothing duplicated
Adoption percentage at a glance
Drill straight into the list of users who haven't enabled it
Follow up individually with holdouts

Dismissible 2FA Reminder

Small, native banner shown on login to users without 2FA
Resurfaces on an admin-configurable cadence (default 30 days)
Never blocks login — nudges, never enforces
Zero changes to the authentication mechanism itself

What's included

Per-user Logins and Failed (24h) smart buttons

2FA Adoption dashboard with live percentage

Dismissible reminder banner with configurable cadence

Automatic log retention/cleanup, admin-configurable window

API/XML-RPC logins tagged distinctly, not mixed into the human-facing log

Graceful null-IP fallback behind proxies, never a guessed address

Zero external dependencies — built entirely on native res.users and auth_totp

Screenshots

Login Activity Log (live)

Login Activity Log running in Odoo, showing a successful and a failed login

2FA Reminder Banner (live)

Dismissible 2FA reminder banner shown on login

Login Activity in the Settings top bar (live)

Login Activity tab in the Settings top bar, with Users without 2FA and Login Activity Log entries

Users without 2FA list (live)

Users without 2FA list showing last login, 2FA due date, reminder frequency, reminders sent and a per-row Resend button

Bulk "Send Reminder to All" (live)

Selecting every user without 2FA and sending a reminder notification to all of them at once

Per-user due date and frequency (live)

User form Security tab with a 2FA due date, reminder frequency override, sent count and a Send Reminder Now button

2FA reminder notification (live)

In-app notification nudging the user to enable 2FA, triggered by Resend or Send Reminder Now

Good to know

This module only ever observes login attempts — it can never change whether a login succeeds or fails. The reminder is scoped to internal staff; portal/external users are logged for visibility but never sent the 2FA nudge, since the reminder mechanism assumes a backend session.

No enforcement, no mandatory 2FA, no IP allowlisting, and no active email/SMS alerting — this is a passive log and a gentle nudge, not an access-control system.