Not a solution for the OP, but to anyone else reading: do not set up 2FA with a single point of failure. If you lost any one thing, would you be locked out like

Not a solution for the OP, but to anyone else reading: do not set up 2FA with a single point of failure. If you lost any one thing, would you be locked out like the OP? If you have to use TOTP codes be religious about saving your backup codes. Otherwise, using multiple security keys means you can recover from losing one, with the bonus of phishing protection (since they can't be tricked into supplying your codes to the wrong domain).