«There are already requests waiting for this account.» (device_sign_in_pending_limit)

Symptom

When choosing to sign in with the phone alone, the page shows «There are already requests waiting for this account. Wait for them to expire and try again.» The API answers 429 device_sign_in_pending_limit.

Similar messages on the same screen:

• «Too many attempts. Wait a moment and try again.»
• «Check the organization and the email or username.»
• «The request expired. If you declined it on the phone or the code did not match, try again.»

Cause

Three sign-in requests are already waiting on the phone for this account. Each request lasts a few minutes. The limit stops anyone from flooding your phone with requests.

Fix

1. Open the app on your phone and look at «Pending requests».
2. Decline requests you do not recognise. If you did not make them, use "It wasn't me".
3. Wait for the rest to expire (the countdown shows in the browser).
4. Ask to sign in again once and type the code on the phone.

If you saw requests you did not make, read I got a request I did not make.

When to escalate

Repeated requests you did not make mean someone knows your email and organization: tell your organization's security team.