In case the device has not been trusted, the user will be asked for security code generated by Google Authenticator mobile app. 2FAS plugin also works with other mobile applications that generate tokens, such as Microsoft Authenticator, Authy, Free OTP, 2STP, OTP Auth..