Short answer
Use backup codes if you have them, check whether any device is still logged in, start the platform's official recovery process, and protect your phone number and email from takeover.
What to do next
Use the related resources for the safest next action. Do not paste TOTP secrets, otpauth URIs, QR screenshots, or recovery codes into search boxes, AI chats, screenshots, or third-party support threads.