Password comes first, then your authenticator code. Billing is enforced before platform access is granted.