Back office is invite-only. Talk to an admin if you need access.
TOTP MFA is mandatory once it ships (post-MVP). Staff who lose their password should ask an admin to reset it directly.