By default, WordPress doesn’t come with suspicious login notifications and two factor authentication. We use plugins (or custom code) for these things. This piece of code notifies you when a user logs in to your site. Good for websites with few users.