A persistent prompt is an on-screen message or dialog designed to stay visible until the user takes action. Unlike a brief notification, it does not disappear on its own, and it may block access to the rest of the interface until the user clicks, dismisses, or completes a request. Common examples include update alerts, permission requests, and sign-in or subscription notices.
In cyber security, persistent prompts matter because they shape user behavior and attention. Attackers can abuse them in phishing, scareware, or fake login screens to pressure users into entering credentials or installing software. Defenders also use persistent prompts for important security actions, such as multi-factor authentication, consent warnings, or critical configuration changes. Because these messages demand attention, they should be designed carefully: clear wording, limited frequency, and a trustworthy appearance help reduce confusion and prevent users from ignoring real security warnings.