All templates

Automated Coinbase Account Security Review

Every Monday, WebRun signs into Coinbase, reads the recent sign-in activity, the devices on the account, the connected third party apps, the live API keys, and the two-factor settings, emails you a review of what changed since last week, and books a short slot to deal with anything unfamiliar.

Runs on WebRun · Strict Lockdown policy
Every Monday at 8:00 AM WebRunorchestrates each step
1 Coinbase review sign-ins, devices, and keys
2 Gmail email you the week's changes
3 Google Calendar book time to act on anything odd
In short

How do I check for unfamiliar sign-ins on my crypto account?

Every Monday WebRun signs into Coinbase and reviews account access rather than money: recent sign-in activity, the devices on the account, connected third party apps, live API keys, and two-factor settings. It emails you what changed since last week and books a short calendar slot to deal with anything unfamiliar.

  • An unfamiliar sign-in gets noticed within a week, not a year
  • Third party apps you forgot connecting are listed every Monday
  • Old API keys stop sitting active without you knowing

Built for crypto holders · long-term investors · traders · anyone with API keys

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens www.coinbase.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    Coinbase - review sign-ins, devices, and keys
    coinbase.com
    WebRun in Coinbase: review sign-ins, devices, and keys
    WebRun opens Coinbase to review sign-ins, devices, and keys.
    • Sign into Coinbase and open the account security and settings pages
    • Capture recent sign-in activity, the devices listed, connected third party apps, and any API keys
    • Note the two-factor method in use and compare everything against last week's record

    Done when Sign-ins, devices, connected apps, keys, and two-factor settings are all captured.

  3. 2
    Gmail - email you the week's changes
    gmail.com
    WebRun in Gmail: email you the week's changes
    WebRun opens Gmail to email you the week's changes.
    • Email the review to your own address with anything new at the top
    • List new sign-in locations, new devices, newly connected apps, and any key created or still active
    • Send to yourself only. WebRun never emails anyone else about your account

    Done when This week's access review is in your own inbox.

  4. 3
    Google Calendar - book time to act on anything odd
    calendar.google.com
    WebRun in Google Calendar: book time to act on anything odd
    WebRun opens Google Calendar to book time to act on anything odd.
    • Book a 15 minute slot when the review turned up something unfamiliar
    • Put the specific item in the event title so you know what to look at
    • Never revoke a key, remove a device, or change a security setting. WebRun reports, you decide

    Done when Anything unfamiliar has time set aside to deal with it.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
www.coinbase.com
ScheduleRuns automatically on this cadence
Every Monday at 8:00 AM
DeliveryHow each run's result reaches you
Security review · Gmail
OutputWhat each run produces - A weekly review of Coinbase sign-in activity, devices, connected apps, API keys, and two-factor settings, with the changes called out.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Can it revoke an API key or remove a device for me?

No. Revoking access is irreversible and can break something you rely on, so WebRun never does it. It reports what it found and leaves every change in Coinbase to you.

Does it touch my funds or place any trades?

No. This run never opens the trading or transfer screens. It reads account access settings only: sign-ins, devices, connected apps, API keys, and two-factor.

Who receives the weekly email?

Only you. The review goes to your own Gmail address and nowhere else, and the calendar slot lands on your own calendar with no guests invited.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.