Password, then the 6-digit code from your authenticator. This device stays trusted for 30 days.
Refreshes every 30 seconds.