[cube2222]

It is, you need to have the phone.

But if you can access the phone content remotely behind a password, then it stops being 2FA.