Moderators and admins also need the code from their authenticator app. Lost your phone? Ask a super admin to reset it.