How to see a log of activities in a Shared Vault

Hi @JEGESAM,

If you're using 1Password Business, the Activity Log will provide general information about actions taken, though it will not display the actual item that was edited or deleted within a vault. Additionally, you can make use of filters to narrow the scope of entries shown:

1. Sign in to your 1Password account in your web browser: https://start.1password.com/signin
2. Click the Activity Log in the sidebar.
3. Under Filter by Type, select Vault Items.

From here, you'll see a list of entries containing vault item handling (edits, deletions). This may help you narrow down who may have deleted any items, provided you know the exact vault where the items were located.

• If a user deleted an item from the Accounting vault, for example, you'll see: "Name updated items in the Accounting Vault".
• If a user destroyed an item from a vault's Recently Deleted section, you'll see: "Name permanently destroyed 1 item in the Accounting Vault".
• If a user moved an item to another vault, you'll see the "updated items in the Account vault" entry, and then another entry directly below the first displaying "updated items in the [destination vault].

Looking at shared vault's Details page on 1Password.com can also help determine who had the permissions necessary to delete items, to help narrow down who may have been responsible.

If you're still not able to determine who deleted the items, or if you run into any obstacles along the way, please send us an email to businesssupport@1password.com from your account's registered email address so we can continue the conversation there, as the team may be able to help investigate further.

After you have sent the email, feel free to post the ticket number you receive so we can locate your message and connect it with this forum discussion.