maybe just add to the prompt something like "(if using 2-factor auth)" or "(blank if not using 2FA)"