# A credential access log for every connected account

> General Input logs each use of a connected account: which credential, what used it, and a plain-English reason, all visible in Access logs.

Feb 26, 2026. Topics: Security, Integrations. https://www.generalinput.com/changelog/2026-02-26-credential-access-log

You should be able to answer "what touched my Gmail account, and why?" without reading code. Since February 26, every time the platform decrypts one of your credentials it writes a record, and the Integrations page has an Access logs tab that lists them all.

### How it works

- **A reason on every credential.** Each account a workflow uses is declared with a plain-English access reason the agent writes, for example "Fetch recorded sales call transcripts from Gong."
- **A record on every access.** An entry is written when a workflow run uses a credential, when a trigger checks a connected account for new items, and when we register a webhook with a provider on your behalf.
- **Encrypted at rest.** Credentials are encrypted with AES-256-GCM and decrypted only for the run that needs them, after checking they belong to the person running it.
- **Refresh tokens stay with us.** For OAuth accounts the server refreshes tokens itself and passes only a short-lived access token into the sandbox.

### Also shipped

- Publishing a workflow as a template packages only its code. Variable values and connected accounts stay in your workspace.