Two-factor sign-in

Two-factor sign-in (a 6-digit code from an app like Google Authenticator, on top of the password) is handled by the Two-Factor Authentication module, not this one.

The Enable 2FA switch on the Security module's Configure screen does nothing.

See the Two-Factor Authentication guide to switch it on and choose who must use it.