Both a code to your email and a code to your registered phone are required. That is deliberate: your account holds bullion positions and linked bank accounts, so one compromised mailbox should not be enough to take it over.
No longer have access to the phone number on your account? A reset can't be completed without it — call us on 833-376-9980 and we'll verify you another way.