Login required. A one-time code goes to the owner's mailbox; the session then stays active for 24 hours.