If we notice an attempted login from a device or browser, we'll ask for your password and a verification code.
Use text message (SMS) to receive verification codes. For your protection, phone numbers used for two-factor authentication can't be used to reset your password when two-factor is on.
Use recovery codes to log in if you lose your phone or can’t receive a verification code via text message.