If you enable the setting Require Two-Factor Authentication for Each Login, you’ll need to verify every time you log in. If not enabled, MFA may only be required for certain high-risk actions.