We now present multi-factor authentication challenges on every login. We may adjust this in the future to allow for trusted devices and risk assessments to determine when to challenge.