In order to confirm the identity of the person entering an account, a verification code is given to a different device. It's used for two-factor authentication.