Its always best to have a backup email and add the mobile number in email account as added security, it will ask to either verify the email address or phone on new IP's if login is detected from unknown IP address.