TunMan
The 6-digit code from Google Authenticator, Aegis, Authy or similar.

Lost your phone? An admin can send you a new setup link, or run flask enroll <user> on the server.