{#if data.enabled}
Signing in asks for a code from your authenticator app after the password. Give a code to turn it off.
{/if}
{#if data.pending}
Scan this code with your authenticator app:
Or add this key to it by hand: {data.pending.key}
Keep these recovery codes somewhere safe; each signs in once without the app. They are not shown again.
{#each data.pending.recovery as code}{code}{/each}
{/if}
{#if data.off}
Signing in asks only for the password.
{/if}