Email, password, then your authenticator code.
@askkaren.co.za only
Next: your authenticator code. After 5 failed attempts the account is blocked until the Owner resets the password.