Yes, one of those "confirm it's you" emails. They're less intrusive than regular 2FA, and are only needed when a user logs in from a machine without the right cookie
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments