Subbly
Day 0 after signup
New login alert
Why it works
- State the security event and include relevant login details so the recipient can assess whether it is familiar.
- Put the recommended protective action directly after the event description.
- Keep the message brief and make the next step clear with a single prominent call to action.
How it is built
- Personal greeting
- Login attempt details
- Security recommendation
- Support offer
- Password change button
Email copy
Hi [First name], We’ve detected a new login attempt from a WebKit device using Linux with IP address 93.170.44.58. If you don’t recognize this, we strongly recommend changing your account password. If you have any questions please feel free to reach out to us. Change password © 2026 Powered by Subbly. All rights reserved.