That’s ideal, but it’s a lot harder and involves more invasive tracking to determine normal activity. You really have 2 options from a UX standpoint. Either al

That’s ideal, but it’s a lot harder and involves more invasive tracking to determine normal activity. You really have 2 options from a UX standpoint. Either allow the login and notify you, which gives you less friction in your experience with the application if it really is you. Or they can stop you right on the login screen and send you an email with a code or a link to click before you go further. It’s more secure, but it adds friction on the more common case that it really is you.