I have my PayPal account linked to my primary email address, as well as my phone. My main usage is with eBay that only accepts this and Google pay. Today I tried to buy something and after entering my password it proceeded to complain about "unusual activity" from my account and prompted me to change my password. The password I used for this is pretty secure and it's something I remember, now I changed it I have to mess about with password managers until I remember it.
Thinking about it I know why it prompted me to do this; I simply ordered a take-out from my laptop the previous day which has a VPN. Although when ordering it didn't complain about it. AFTER I changed my password it THEN sends a code to my phone to "confirm it's you"... why didn't it do this before? Or send me an email? Or both? Rather than FORCE me to change my damn password? After all, isn't this why you link all this to PayPal?? At least give people the option to confirm any other way.
