Many systems now send an email notification to a user when they login that includes the IP address they logged in from and the date/time and browser/device. This is a useful security feature so that clients and staff are alerted to potential logins they did not make.

This would require:

• A setting (Under Settings > Company, potentially General) called Login Notifications
• There should be an option for enabling the notifications for Staff and for Clients independently
• There should be 2 new email templates, one for Client and one for Staff, called "Login Notification"
• If enabled, the notifications should be sent to the staff member's email, the client's email, or the contacts email upon successful login

Here's a sample for the email content for each of these templates:

Subject: Login from [IP Address]

The system detected a successful login attempt from your user [username] at [date and time] from [ip address]. If this login was from you there is nothing you need to do. If this login was not you, please login to your account and change your password immediately.

[link (to admin or client area login page)]