Your username is the 1st, and your password is the 2nd factor — TOTP, hardware keys, SMS codes, and email codes are useless.