Hands-on practice · no signup
Practice: an MFA prompt you didn't ask for
You sign in to a work portal, fetch the six-digit code from your Authenticator app, and get on with your day. An hour later your phone buzzes again — a sign-in approval you did not start. This simulation puts you in that exact moment.
Free, and nothing here is real. No account, no download, and no message, payment, or account is ever actually touched.
Part of Never Approve an MFA Prompt You Did Not Start. Free, plain-English practice for everyday work technology.
What you'll do
- Sign in to a mock work portal and see the six-digit code request appear.
- Open the Authenticator app on the simulated phone and read the code.
- Type the code and get in — because this time it really was you.
- An hour later, an approval prompt arrives that you did not start, showing a number to match.
- Decide: approve it to make it stop, or deny it and report that someone has your password.
What it teaches
Only approve a prompt you started yourself. A prompt out of nowhere means someone already has your password, so deny it and tell whoever handles tech where you work.
MFA and 2FAverification codesprompt bombingaccount takeover warning signs
Want the full lesson?
The simulation is the practice. The lesson explains the why, in plain English, in about five minutes.