2 ms·

If having your "second" factor is sufficient to reset your password, then it's your only factor and you don't actually have 2FA.