Live and setting-up codes work in the app; switched-off codes are refused. Changes reach phones the next time someone types the code (Cloudflare can take up to a minute to spread a change).