Create an opt-in email notification when a user logs in for a new device. This is for admins and active editors who are worried about getting hacked.
The notification is off by default, opt-in under the Notifications tab.
Definition of "new device" is the same as LoginNotify. There's a cookie per device, which lasts for 90 days since the last time you logged in with that device.
Email still to be written, based on the LoginNotify email.
----
original ticket:
Most large sites (Facebook, Google etc.) offer some kind of alert when someone logs in to an account from a new machine - it's a good way of protecting against account theft:
{F305280}
{F305286}
{F2546774}
I wonder if something like that would make sense for MediaWiki? Ie.
* put the one.way hashed username in a cookie with very long expiration
* after a successful login check for the presence of the cookie
* if it's there, update the expiration date
* if it's not there, and the user requested alerts, send an email with the IP and other details of the login.