Not sure if it's appropriate to add to this thread... I've just been asked to login, username and password provided, then I was asked for the verification code from the app on my phone (or words to that effect... the phone was definitely mentioned). This caused me quite a bit of consternation, as I only log in to TP from my laptop, and the only verification codes I've had on my phone came as texts! Eventually I realised I needed to open my password manager, and there under TP was the code I needed. OK, I should have worked this out sooner, but, I am old!
Can I suggest this wording be adjusted, perhaps removing reference to the phone?
I did notice that I apparently have to login afresh every 30 days. I can't say that's a bad idea, but being logged out without warning is very confusing.