Reply to thread

Two things:

1. That message only appears if you've explicitly opted in to requiring two-step verification. This can either be forced when accessing the ACP via an option or forced on anyone via a permission. One of those must have been enabled.
2. You don't need to enter a code on every login. If you choose to trust the device, you won't be prompted again for 30 days.