The problem is that there are two types of codes:

• sent by rep and is used for verification
• sent by system and is only used for login

They have different messages on the text, but since I would receive the first while on the phone, I tend to skim the message and get to the number.

For TOTP, yes, you only give your code when initially registering it to verify with the other end that it’s working.