2FA adds a second lock — even if someone steals your password, they can't get in without your phone. Here's how to enable it.