It doesn’t. The website would ask for an id check, you would generate it on the processor side and give the randomized ID to the site so it could go check it’s valid and let you through. It can be used to verify an account permanently but without one, it would kinda act like a temporary 2FA code.