Use Google Authenticator or Authy for 2FA codes