Sign in with your password, then verify with your authenticator.
Set up your authenticator to unlock this workspace. Confirm your password to generate a QR code.
Scan this QR code with your authenticator. On this same phone, you can copy the setup key into your authenticator instead.
Save these recovery codes somewhere private. Each works once, together with your password.