Typically you print out recovery codes and keep them somewhere safe
most thefts are inside jobs, so somewhere safe would be to give them to a total stranger