This happened to me. I had the password, same recovery email, but phone number was one I no longer had access to. Turns out it was a IP location issue. When

This happened to me. I had the password, same recovery email, but phone number was one I no longer had access to. Turns out it was a IP location issue. When I traveled back to the same city I created it, I never got the 2nd challenge. The password was enough. I could then update the phone number. It's really nuts. I mean, if you know 2 out of 3 security challenges (password, recovery email, but not phone) suddenly that's enough to lock you out?