We will generate a QR code in our ASP.NET Core application and use it to configure Google Authenticator app in our smartphone which will generate a six-digit time-based one-time password (TOTP) to implement two-factor authentication in our web application.
http://ankitsharmablogs.com/asp-net-core-two-factor-authentication-using-google-authenticator/