Mandatory two-step verification is required for every admin account. After password verification, the portal first sends a 6-digit code to the 2-step contact email on file, keeps the phone number on file for contact and future SMS support, and then falls back to the emergency code or authenticator backup when needed.
If an admin lost access to the registered 2-step contact email, use the separate recovery portal after this file is deployed to move the account to a new admin email and re-issue recovery materials.