you can have mobile authenticator removed if you have the login name, a pops from the account and the full phone number all you have to do is get that information;
if the person uses alot of social media you can easily find most of it.
also if the user has remember me on and you have the userdata and ssfn files you can just login as well but you cant do much without removing the auth first.