Back office. Every action is recorded in the audit log.
The 6-digit code from your authenticator app.