Is the requirement 'The system must use two-factor authentication with a one-time password' a functional or non-functional requirement?

The requirement "The system must use two-factor authentication with a one-time password" relates to functional requirements, as it describes a specific function that the system must perform — providing an additional level of security during user authentication.