A 6-digit code is sent to authorised addresses. It expires in 10 minutes.