diff --git a/auth/faq.mdx b/auth/faq.mdx
index cb0c912..be865a0 100644
--- a/auth/faq.mdx
+++ b/auth/faq.mdx
@@ -18,6 +18,10 @@ Managed Auth supports username/password authentication and most SSO providers.
 Passkey-based authentication (e.g., Google accounts with passkeys enabled) is not currently supported. If a user's SSO provider requires a passkey, the login will fail with the `unsupported_auth_method` error code.
 </Warning>
 
+<Warning>
+For sensitive identity providers, use an established account and attach a stable ISP or custom proxy before login. Keep the default 1-hour health-check interval unless you need faster detection; repeated checks from a new account or changing IP addresses can trigger the provider's security controls.
+</Warning>
+
 ## What happens if login fails?
 
 Kernel retries with exponential backoff, then surfaces an error code (`credentials_invalid`, `bot_detected`, `captcha_blocked`, etc.). See [Connection Lifecycle](/auth/connection-lifecycle#when-a-login-fails) for the full list and recovery steps.