Use a one-time offline recovery code.

Each code works once. Password login remains available from the normal sign-in page.