There’s a glitch in the matrix.

For additional security HMRC uses the equivalent of two factor auth - they send as number to your text, phone or app.

When you download the app you simply say send alert to the app - it does and you are authorized.