Case 1: change password

email + password + phone verification code

Case 2: login a new device

email + password + trusted device verification code