Did you receive one of these security code notifications, but were not trying to login?
This means that someone may have attempted to login to your account.
While this could mean that an unauthorized individual knows your password and username (email), they are likely unable to login as they don't have access to the two-factor authentication (2FA) method.
This could also have been caused by a data breach on another website. Attackers will often use email lists found online and attempt to login on a variety of websites, testing logins leaked on these other website or simply trying to brute force a variety of password attempts.
Thankfully, Bonsai requires this additional 2FA process for all users, which improves account security dramatically.
Two-Factor Authentication may have prevented someone from accessing your account
This assumes that access to your email hasn't been compromised. However, if you think your email login or other account logins may have been stolen, we recommend changing your password(s) immediately. That, along with continuing to use additional security steps (such as this 2FA code), are often strong safety measures one can take to protect themselves online.
Note: You are unable to deactivate two-factor authentication on your Bonsai account. Even by request, our support team will not be able to deactivate this on your account.