How JustAnswer Works:
  • Ask an Expert
    Experts are full of valuable knowledge and are ready to help with any question. Credentials confirmed by a Fortune 500 verification firm.
  • Get a Professional Answer
    Via email, text message, or notification as you wait on our site.
    Ask follow up questions if you need to.
  • 100% Satisfaction Guarantee
    Rate the answer you receive.
Ask Josh Your Own Question
Josh, Mac Support
Category: Mac
Satisfied Customers: 19858
Experience:  5 years as Network Admin, 10+ years of IT support
Type Your Mac Question Here...
Josh is online now
A new question is answered every 9 seconds

I need to find out when someone used my macbook pro to log

Customer Question

I need to find out when someone used my macbook pro to log into their gmail account using firefox on my macbook pro. When I open firefox and open gmail the login screen appears and the username is ***** ***** with this persons username. The person never had my permission. I need to know the date they used my macbook pro
Submitted: 2 years ago.
Category: Mac
Expert:  Josh replied 2 years ago.


There isn't any option to view when someone accessed your computer but you can pull up Firefox history and see when someone accessed Gmail with a date/time.

In Firefox, press Cmd+Shift+H

Customer: replied 2 years ago.
I know Macbook pro laptops keep a record or log of everything done on them. The history does not show me when the account was logged into. The account was logged into for sure since the username was saved and automatically populates now. I need a tech to walk me through or log in remotely and find the information
Expert:  Josh replied 2 years ago.

I think you are referring to Mac Console

Go to Applications>Utilities>

Customer: replied 2 years ago.
do what there? I have been there but I dont know how to navigate and what to look for
Expert:  Josh replied 2 years ago.

Here are what the options show and mean:

Clicking on "Show Log List" in the toolbar will bring up the Log List. The Log List opens a sidebar which shows all of the different logs that the system maintains. This list helps in viewing the many different logs maintained in various parts of the system by bringing them all together to one place. By clicking on a particular log category, all of the logs will be shown.[4]

System Log Queries[edit]

The System Log Queries contains all of the logs that have to do with the entire system. This includes system logs as well as individual application logs.[4]

All Messages[edit]

Selecting All Messages gives a live look at your computer's activities, updated live. This includes all activities from both the system as well as any applications running. Logs in this section of the Console are all formatted uniformly. They all include a timestamp, the name of the process or application, and the actual message of the log. When the message displayed includes a paperclip icon next to it, it means that it is a shortened version of a longer report, and clicking the icon will show the complete report.[5]

In addition to viewing all messages, users can also create custom queries with any criteria that they like. These custom queries will filter the messages and will also be shown in the All Messages section. In order to make a new query, choose "New System Log Query" from the File menu.[6]

Diagnostic and usage information[edit]

Logs in this section include diagnostic events by either an application or the user. Diagnostic events include:[7]

  • An application quitting unexpectedly.
  • The user chooses to force an application to quit.
  • A system error requires the user to restart the computer.

Diagnostic and Usage Messages[edit]

Messages in this section of the console mainly tell how the system or applications are used. The section contains only the messages, not the actual reports of the problem. While the system log shows ongoing activities of the system, the Diagnostic and Usage Messages section contains information about system hangs and application crashes.[6]

User Diagnostic Reports[edit]

User Diagnostic Reports are messages that relate to the current user's account. Messages from programs that are running while they are logged in will be displayed in this section.[6]

System Diagnostic Reports[edit]

System diagnostic reports include the following information:

  • Details about an application or the system not responding.
  • An application unexpectedly quitting.
  • Kernel Panics
  • Information regarding events on the computer (Such as unsuccessful attempts of a function)
  • Usage information (How the user uses the system as well as third party software).[7]


Files are used to separate the log files into different categories for easier viewing. While all of the logs can be seen in the all messages section, logs in this section are organized based on the different criteria, and are also linked to the actual files. Therefore, in this section, a user can locate the log file they are looking in a finder window.[6]


Logs found in this section all relate to drivers and kernel extensions that load when you boot. System.log may also contain drivers and software that are not used any longer, but have lingering services still running. Many times, hardware failures are the cause of drivers, and the log files for those can be found here as well.[3] Most of the logs contained here are from events that occur when the system goes to sleep, shutdowns, restarts, or starts back up.[2]


Logs found in this section are the result of the software communicating with the hardware. When a problem occurs in the translation of commands from the system or an application to the cpu and other electric components of a computer, the log that gets created is stored here.


The logs contained under these folders track the activity in the account of the current user who is logged in. By expanding the folder, you can find logs for specific programs and services within your account.[3] Crash reporter logs are also located in this section. They contain information about applications when they crash, and they can be sent to developers in order to figure out the cause of a crash.


The logs contained here offer the same ability to expand folders and find logs for specific programs and services, however, they are the logs for anyone who uses the computer. This section contains the log files for both the user currently using the computer, as well as for any other accounts on the computer.


Logs in this section are mainly low level logs that do not contain information about any particular application or any specific part of the system. They contain authorization logs for using the system and various applications.

Customer: replied 2 years ago.
If I am looking for the date someone used my laptop to log into a specific gmail account what one of the above do I use?
Expert:  Josh replied 2 years ago.

The logs will show when Firefox was opened but that does not help unless you know the exact date/time. You should use Firefox history -- It will show when was accessed if you can find the date/time; it could take a lot of scrolling and checking.

Whose email address was showing? It is something you recognize?

Customer: replied 2 years ago.
I saw the username automatically populate when I opened firefox and then the gmail login screen. I didnt know whose it was. I usually used safari and never saw it. I asked and they said they logged into their email back in spring of 2013. I wanted to confirm that and see if they have logged into it since? The firefox history only shows the times I opened the login page when his username populated it not the actual time it was logged into
Expert:  Josh replied 2 years ago.

Correct -- The actual time an account logged into is something that can be found if you are sign into that Gmail account. For example, if you signed into that account, it would show the last 5 times the account was logged into (including the date/time and location)

I understand what you would like to know but it is not possible unless either you can access their account (sign into it) or you had a keylogger program installed on your computer that records the keystrokes.

Customer: replied 2 years ago.
how would the macbook not have a log of when a specific email was logged into?
Expert:  Josh replied 2 years ago.

The log will have when Firefox was opened and use and the Firefox history will show the history of being accessed.