This console can read every user's record, so a password on its own
is not enough. One-time setup.
Add this to 1Password, Apple Passwords, or any authenticator app:
Or enter the key by hand:
Save these recovery codes somewhere safe.
They are shown once and each works a single time. Without them, losing your authenticator
means losing the console.