...
Once customer/admin has enabled Two Factor Authentication, in their profile edit screen they will see QR code to scan with iOS / Android Google Authenticator app:
After login, customer/staff member will be asked asked to enter their time-based security code, generated by Google Authenticator mobile app: