Staff accounts only. Sessions last 8 hours.
The six digits from your authenticator app.
Lost your authenticator? Another admin can re-issue you an enrolment link.