The user is then notified of the (unprotected) login via SMS or e-mail which Just as with Facebook Login Notifications, users must perform this step the first time .