For the "lost my phone" case. Enter your username, one of your 10 recovery codes, and a new password. The recovery code is consumed, your Google Authenticator factor is removed, and you get a 24-hour grace window to re-enrol on a new device after signing in. If you have no recovery codes left, ask a Master admin to reset your MFA.