Recover staff access
Password recovery never bypasses the backend's verified aal2 requirement.
Lost an authenticator?
Use another enrolled TOTP factor. If every factor is lost, follow the controlled staff recovery runbook; a factor reset must be performed in the provider console and a new factor enrolled before privileged work resumes.
Try a backup authenticator