---
title: "2FA Fatigue Attack"
slug: "2fa-fatigue-attack"
updated: 2024-11-14T08:59:16Z
published: 2024-11-14T08:59:16Z
canonical: "docs.connect.visma.com/2fa-fatigue-attack"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.connect.visma.com/llms.txt
> Use this file to discover all available pages before exploring further.

# 2FA Fatigue Attack

A 2FA Fatigue Attack – also known as 2FA Bombing or 2FA Spamming – is a cyberattack strategy where attackers have gained access to the password of the target account and repeatedly send two-factor push authentication requests to the targets registered devices. The goal is to coerce the victim by exhaustion to approve them access into the application, thus authenticating the attackers attempt at entering their account.

To mitigate this our Authenticator App allows 5 push notifications to be ignored or denied before it suspends more attempts the next 30 minutes.