Two factor auth for community login is broken

I had exact same problem first time in. I have Face ID on my phone so even more complicated and confusing but hey? Here I am. It could be easier. Never heard of anyone using a verification code on every log in. What is it that is actually being protected here? It’s conversation not banking.