Use one of the recovery codes you saved when you set up your authenticator. Each one works once.
No recovery codes left, and no authenticator? The practice owner can set a password from a trusted machine — that is the last way in, and it is deliberately not something a web page can do.