6-digit code from your authenticator app, or an emergency backup code
Unauthorized access attempts are logged