diff --git a/src/content/changelog/access/2026-01-08-Access-audit-log-for-DoH-users.mdx b/src/content/changelog/access/2026-01-08-Access-audit-log-for-DoH-users.mdx
new file mode 100644
index 00000000000000..0cf547400cdc01
--- /dev/null
+++ b/src/content/changelog/access/2026-01-08-Access-audit-log-for-DoH-users.mdx
@@ -0,0 +1,11 @@
+---
+title: Cloudflare admin activity logs capture creation of DNS over HTTP (DoH) users
+description: Cloudflare admin activity logs display when a DoH user is created.
+date: 2026-01-08
+products:
+  - access
+---
+
+Cloudflare [admin activity logs](/cloudflare-one/insights/logs/) now capture each time a [DNS over HTTP (DoH) user](/cloudflare-one/networks/resolvers-and-proxies/dns/dns-over-https/) is created.
+
+These logs can be viewed from the [Cloudflare One dashboard](https://one.dash.cloudflare.com/), pulled via the [Cloudflare API](/api/), and exported through [Logpush](/cloudflare-one/insights/logs/logpush/).