Your normal WordPress authentication remains underneath IboFile. If Two Factor is enabled for your account, its authenticator/email challenge follows after your password. IboFile keeps a successful mobile sign-in for up to 4 hours and a desktop sign-in for up to 2 days unless you sign out or the session is invalidated.