There are two methods—e-mail and app.
The e-mail method utilises the user’s e-mail address.
The app method leverages a third-party authentication app (e.g. Google Authenticator, Microsoft Authenticator, Free OTP).