If two-factor authentication is on, you then enter a code from your authenticator app or one of your recovery codes; this step expires after 5 minutes.
After 5 wrong passwords, sign-in is paused for 15 minutes to protect your account. Wait and try again, or reset your password. Support never needs your password or your codes.