3 ms·
> Why is a person from UK logging in from China IP? And then we get to the other side of this where people get locked out of accounts because they went on vaca
by vel0city 3y ago
> Why is a person from UK logging in from China IP?
And then we get to the other side of this where people get locked out of accounts because they went on vacation and bothered to check their email.
And often times these "person from UK logging in from a China IP" are massively wrong. For the longest time my home IP was showing up as from another country in most GeoIP databases. They're routinely trash.
- theragra 3y agoI think best solution is to do this for users without MFA. That way we wont suffer for their sins.
- maerF0x0 3y agoThe only good thing I have to say about lastpass is that they allowed you to allowlist countries you wanted a login from. Like calling your credit card company, I'd login and add a country if I was traveling.
- vel0city 3y agoThat's an example of what I was talking about though. I set LastPass to only let me sign in from the US and suddenly I was locked out at home because it thought my home IP address was non-US despite definitely being in the US at the time.
- maerF0x0 3y agoYeah security is always a tradeoff of convenience and control. If I were in your shoes i would have allow listed the IP. either switch to my phone, went to a coffeeshop, or a friends house, or the library, or the gym, or mcDonalds, or Target...