Two Factor Auth doesn't work in browser on mobile

With Defender's 2-factor auth enabled, the code is only requested when trying to access the site via desktop - not in a mobile browser. Try logging in to the site using the browser on mobile device and username and password will let you get in without any additional authorization.