Owner only. Your password and the 6-digit code from your authenticator app.
Five wrong tries lock sign-in for 15 minutes. Every sign-in is in the Activity log.