Sign in
The code is in Google Authenticator or Microsoft Authenticator on your phone. It is asked at every sign-in. You are signed out when you close the browser, after 30 minutes without use, or after 12 hours at most.