Use a one-time code instead