Recovery uses ten single-use codes. Privileged recoveries need two administrators. SMS and voice are not available.
