One is typically the username-and-password combo, while the second is usually an autogenerated code sent to the user’s ...