Use your password OR an authenticator code
Whichever you use, an existing user still needs to approve your sign-in on a new device.