A clickable multi-factor authentication link, valid for 20 minutes, is sent to users via email to verify identify upon log in.
98th session Working Group on Arbitrary Detention