The plugin hooks a link leading to the code generation page in the User CP. After confirming the current password a QR code is displayed which can be then used to sign in into the account without having to type in the password on mobile devices.
Adjustable code strength, expiration time and log-in history ensure the security of these operations.