A temporary, unique code sent to a user's phone or email, used as an additional authentication factor to verify identity and enhance security during login or transaction approval.