Receiving Workday "New Device" Security Alerts Via Email

Tags workday

 Issue

I'm receiving an unexpected email notification via Workday that I logged into my account from a new device:

 Cause(s)

This email gets triggered when the system recognizes a login from an unrecognized device, which can occur under several conditions:

  • If you access Workday via the website, it uses a browser cookie to identify trusted devices. If this cookie is deleted or reset -- such as after a browser update or clearing your browser cache -- Workday will no longer recognize your computer and will treat it as a new device, triggering a security alert email.
     
  • If you access Workday using the mobile app, an update to the app can reset its record of trusted devices and trigger the same alert.

 Under either condition, this notification is expected behavior and does not necessarily mean your account has been compromised.

 Resolution

How you should react depends on whether you were actively logging in to Workday when the alert was sent:

  • If you were logging in at the time, then this is a routine security check. If you are accessing Workday via the website, select Remember this device when prompted -- you will not receive the alert again from that browser until the cookie is reset. If you are accessing Workday via the mobile app, no additional action is needed.
     
  • If you have not logged into Workday, please contact the Help Desk. An alert for a session you did not initiate warrants investigation