You can see when a login was created in the catalog view sys.server_principals.
The default trace records events like creating or dropping a login, but keep in mind this information is not retained for a very long time as new rollover files are created. (Only the five most recently are retained by default.)