Tracking User Logins
You can use the Login Audit Trail to keep track of user logins and locations. See Login Audit Trail Overview. This specialized search also tracks tokens associated to users, for accounts that use token-based authentication. See Troubleshoot Token-based Authentication (TBA).
System Notes track password change information for employee, customer, vendor, partner, and prospect records. The system notes include details about who made the change, when, and the type of change. Examples of change types include USER_CHANGE, USER_RESET, EXPIRED, ADMIN_SET, GENERATED, and others.
If a user has access to roles in different NetSuite accounts, the password changes are also tracked in those accounts. For more information, see Password Changes Are Logged in System Notes on Entity Records.