Lost the phone with the authenticator app or access to your e-mail? Enter the account password and recovery key. For security, two-step verification is only removed after 72 hours: we warn the account e-mail right away, with a link to cancel, and any login with the code before that cancels the request.
Without the recovery key, contact support.