Comment by JakeWesorick

If she is logged in on any other device, even if that device is offline, you can use it to get past two factor auth.