Use a one-time code — no password needed.