You get a link that works once and expires in an hour. It sets a password and nothing else — your authenticator stays exactly as it is, and signing in afterwards still asks for the six-digit code.