Issue
How often do I need to provide a verification method when logging in to Heroku?
Resolution
You must respond to an MFA challenge for every login through Heroku web UI. This applies to all web logins, including those due to expired sessions and those initiated for CLI login.
The frequency of MFA challenges can't be modified.