So the big thing with the new 2FA model is simply this... If someone else tries to get into your account after compromising your password, then you get a notification saying someone is trying to get into your account and you either have to provide the 6-digit number, or they have to guess it. The goal with this is to meet certain criteria in IT regarding the CIA and IAAA models in Security. CIA Confidentiality Integrity Availability IAAA I dentification Authentication Authorization Accounting The point being is that it becomes more about the area's of something you are (the account holder), something you have (the account password), and something you know (the account 2FA password and code to get into the account.)