A sign-in code is mailed to the address on the allow list. This device is then remembered, so you only do this once.

Code sent to . It is good for 10 minutes.