Protected by two-factor authentication.
Email OTP or Authenticator app (Google / Microsoft / Authy) — your choice.