Login Pings You Didn't Ask For: What to Tell Your Kids

Many apps protect accounts with a second check: when someone logs in, your phone asks "Is this you?" and you tap Yes or No.

Scammers who already have a password sometimes send that request again and again, hoping a tired or annoyed person taps Yes just to make it stop. Security teams call it push bombing or MFA fatigue.

For children, keep it simple. A password is a key. The phone check is a second lock. A ping you didn't ask for means someone else is at the door with your key.

What to do: tap No, change the password so the stolen key stops working, and tell a grown-up. Some apps also show a number to type in, which makes this trick much harder.

The rule from the episode: didn't ask? Tap No.