...
As an extra layer of security, two-factor authentication is available for CMS User logins in from version 1.21. When this is active for a User, they are required to enter their password and verify the login through a PIN (passcode) provided by an authenticator app on their personal device. This two step procedure is designed to ensure that the person logging into the CMS is the owner of that account.
...