The number of failed login attempts due to a wrong password has increased abnormally.
The [[https://grafana.wikimedia.org/dashboard/db/authentication-metrics?orgId=1|authentication metrics]] suggests that bots are trying to password brute-forcing. Several contributors receive the following notification: "There has been a failed attempt to log in to your account from a new device. Please make sure your account has a strong password".
Public version of private dupe T193762
**[[https://phabricator.wikimedia.org/T193769#4181044|Longer explanation for community members]] **below - also [[https://lists.wikimedia.org/pipermail/wikimedia-l/2018-May/090145.html|on Wikimedia-l]]
**Sysops and other users with advanced user rights can [[ https://meta.wikimedia.org/wiki/Help:Two-factor_authentication | enable two-factor authentication ]].**