When a user attempts to log in, they must enter their regular password. After this, a unique code is sent to their registered email address. The user must then enter this code on the login page to gain access. This ensures that only someone with access to the registered email can complete the login process.