Comment by MrBra

So are you saying that if it was a regular website accessible from a desktop pc you would check against MAC address or some other hardware id to "notify users when someone from a different device tries to log into their account" ?