DigitalOcean accounts with email and password sign-ins and no 2FA are protected with device verification by default. Each time you sign in from a new location using a new device or a different web browser, we email an authorization code to the email address you use to sign in or send an SMS to the phone number you provided.
You can disable device verification by enabling two-factor authentication (2FA) or single sign-on (SSO) with Google or GitHub.