How to check last login time for users in Linux

There are few commands which you can use to get a list of last logged in users with time details

Command 1

last - show listing of last logged in users
Description
This command searches back through the file /var/log/wtmp (or the file designated by the -f flag) and displays a list of all users logged in (and out) since that file was created.
Examples
To view last login time of all the users

$ last
deepak pts/7        server1.example Mon May  5 14:36   still logged in
deepak pts/5        server1.example Mon May  5 14:34   still logged in
deepak pts/7        server1.example Sat May  3 16:20 - 17:21  (01:01)
deepak pts/5        server1.example Sat May  3 16:17 - 17:21  (01:04)
deepak pts/5        server1.example Fri May  2 15:34 - 17:52  (02:17)
deepak pts/5        server1.example Sun Apr 27 23:48 - 07:25 (1+07:37)
root   pts/5        main.test       Sun Apr 27 04:18 - 04:20  (00:02)
rahul  pts/11       server1.example Sat Apr 26 06:25 - 17:16  (10:51)
rahul  pts/10       server1.example Sat Apr 26 06:20 - 17:16  (10:56)

To view the last login time of specific user

Syntax

$ last username

$ last deepak
deepak pts/7        server1.example Mon May  5 14:36   still logged in
deepak pts/5        server1.example Mon May  5 14:34   still logged in
deepak pts/7        server1.example Sat May  3 16:20 - 17:21  (01:01)
deepak pts/5        server1.example Sat May  3 16:17 - 17:21  (01:04)

To view the ip address details of the source machine

$ last deepak -i
deepak pts/7        192.168.0.100   Mon May  5 14:36   still logged in
deepak pts/5        192.168.0.100   Mon May  5 14:34   still logged in
deepak pts/7        192.168.0.100   Sat May  3 16:20 - 17:21  (01:01)
deepak pts/5        192.168.0.100   Sat May  3 16:17 - 17:21  (01:04)

Command 2

lastlog - reports the most recent login of all users or of a given user

Description
lastlog formats and prints the contents of the last login log /var/log/lastlog file. The login-name, port, and last login time will be printed. The default (no flags) causes lastlog entries to be printed, sorted by their order in /etc/passwd.

Example
To view last login time of deepak

$ lastlog -u deepak
Username         Port     From             Latest
deepak         pts/7    server1.example Mon May  5 14:36:52 -0400 2014