| Hi , You may have heard the term "MFA fatigue" floating around, so we wanted to walk you through it in plain English. It's a tactic where someone who already has your password tries to log in over and over, hoping the flood of push notifications wears you down until you tap "Approve" just to make them stop. The good news: once you know what it looks like, it's easy to shut down. Signs a login push isn't really you | • You didn't trigger it. No login attempt on your end means the prompt isn't yours. | | • Unfamiliar location or device. A city you've never logged in from, or hardware you don't own. | | • Repeated prompts. One push is normal. Several in a row is the fatigue tactic at work. | | • Odd timing or app. A 2 a.m. notification, or a sign-in request for a service you don't use. | If it happens to you | ✓ Tap Deny, never Approve. Approving doesn't stop the prompts, it hands over access. | | ✓ Change that password right away. Unprompted pushes mean it's already out there. | | ✓ Give us a call. We'll revoke active sessions and get you back on solid ground. | | If you'd like to move to number matching or a hardware security key (neither can be worn down by repeated prompts), just reach out. We're happy to help set it up. | Not sure if a prompt is legit? When in doubt, deny it and let us take a look. We'd rather field a false alarm than miss a real one. ✉ Submit a ticket Time-sensitive? Call the helpdesk: 541.696.5555 · Option 1 | A few seconds of "wait, is this me?" is all it takes to keep this one off your plate entirely. |
