- if a code is pushed to their phone it needs to be visible even when not logged in - Can make it so they have to use faceid/pin or the equivalent before showing when they are not logged in.