Recovery sign-in for the super admin. This path is logged.
Set up two-factor authentication. Scan this with an authenticator app (Google Authenticator, Authy, 1Password), then enter the 6-digit code to finish.
Enter the 6-digit code from your authenticator app.