From your authenticator app. A recovery code also works. Leave blank if you have not set one up.