He is getting “two factor authentication” … that can usually be turned off at the site you are logging into. Also on some sites, when you are on a new computer, it takes several logins before it will recognize your computer without the challenge code. Here is a link to which banks are currently supporting 2 factor authentication:

https://twofactorauth.org/#banking