Manually disable Two-Factor
You can manually disable Two-Factor if you don't have access to your device or didn't configure it correctly.
To get back in rename the plugin directory to something like ithemes-security-pro.bak via FTP to deactivate it. Then log in and rename it back to it's original name to reactivate it. Now you can disable or properly configure Two-Factor.