Password + authenticator code.
Lost the phone? Use one of your recovery codes in place of the 6-digit code.