MFA prompts: when to approve and when to deny
Understand why an unexpected sign-in prompt means your password is known, and what to do about it.
- Level
- Beginner
- Length
- About 15 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 1 Oct 2026
Skills you'll practise
- Approve only prompts for sign-ins you just started.
- Use number matching correctly.
- Respond to repeated prompts by denying and reporting.
Course outline
- 1.MFA prompts: when to approve and when to denyVideo · 3 min
- 2.Only approve what you startedLesson · 8 min
- 3.Number matching and sign-in contextLesson · 8 min
- 4.After you deny: what happens nextLesson · 8 min
- 5.MFA prompts: when to approve and when to deny: knowledge checkKnowledge check · 18 questions
- 6.Sign-in prompts in the middle of the nightScenario
- 7.Final exam5 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- CISA: Phishing-Resistant MFA and Number Matching fact sheets
- NIST SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.