I'm pretty sure it's triggered by connecting on other devices. And yes it's super annoying. Particularly since it's virtually worthless as an actual security measure. Anyone sniffing your connection can steal the answers and thus your log-in. True two-factor can't be beaten so easily.