A one-time code goes to the phone or email linked to your account