Internal operators only. Security key sign-in is primary, with TOTP reserved for recovery and approved fallback.
Console login does not use a plaintext password. Use a registered passkey/security key, or approved TOTP recovery only.
Use TOTP only when your security key is unavailable or a recovery flow has been approved.