Administrative accounts can now be protected with authenticator-app verification and one-time recovery codes.