Email sign-in needs Postmark configured. Until then, use a passkey — or the bootstrap link, if this is a fresh deployment.
A passkey is already two factors — the authenticator, plus the biometric or PIN that unlocks it.