Woke up to a weird login alert from my own IP last Tuesday

I always thought those 'unusual login attempt' emails were mostly noise. Figured they flag anything slightly off and it's never real. But last week I got one from my own bank about an attempt from an IP that matched my own city. Turns out someone spoofed my IP and tried to reset my password at 3 AM. That freaked me out enough to finally set up two-factor on everything, not just email. Why do we ignore these warnings until something actually almost happens?

1 comments

1 Comment

the_drew6d ago

Devil's advocate here - maybe you're overthinking it. Those alerts are mostly automated noise and the IP spoofing thing could've been a glitch or your own device acting up. Two-factor is solid but it's a pain for everyday logins, so I get why people ignore it till something spooks them. Your mileage may vary though.