meelten: Usually I'm logged in all the time but today I made new browser profile and was kinda surprised that I didn't need to put security code as I always needed in the past. Well I thought maybe gog somehow remembered my IP from last session or something but then I tried log in from my phone which I never used for this site before and it also let me in just like that. Settings say that 2FA is enabled. Slightly worrying.

paladin181: Clear your cookies/history and try to relog. I promise it will ask. If your phone is on your home network then you're likely coming from the same WAN, so it is a trusted address. If your phone isn't on the same network as your other login method, then maybe 2Fa is having an small issue.

meelten: It was entire new browser profile so no cookies or anything. And yes, I used phone from the same home network, now I tried on mobile network and got security code prompt.

So probably false alarm. However it's still rather strange as I'm pretty sure in the past I needed authenticate every single sign in. Maybe they did change something.