@grumpygamer if it's in the EU, it may be because the normal auth codes aren't compliant with bank regulations that say that when you receive a TFA code you need to be told what the code is about, to prevent some types of fraud that were happening with the previously used methods(which would excuse the bank, but not steam and apple, however, unless they are doing payment stuff)