FixableProtecting your accounts
Two-step fatigue (prompt bombing)
Being flooded with approval prompts until you tap “yes”.
Understand it
If an attacker already holds your password, they trigger your two-step app again and again, hoping you approve one to stop the noise, or out of confusion.
How to spot it
Repeated, unexpected “was this you?” prompts, often late at night.
Close the gap
- Never approve a prompt you did not start - deny it and change your password.
- Prefer number-matching, or a physical key, over simple tap-to-approve.
- Report a flood of prompts - it means your password is already out.
- Move high-value accounts to phishing-resistant keys.
What to do about it
This is part of your plan - Turn on two-step sign-in where it matters. Work through it there and you’ll close this off along with everything else it covers.