Moderate

Second-factor verification within the last hour. Falls back to first-factor verification when the user has no second factor enrolled.