Security

For security reasons two-factor authentication (2FA) is added to a login process, but how can you test this properly when random code is being generated?