[madeofpalk]

How do you do account recovery when you lose a password or MFA token?

Of course, any website's auth system is as weak (or strong) as their recovery process. Different sites will implement this differently.

[lolinder]

Typically by email, which OP says "don't do".