Set up Two-Factor Authentication

Scan with Google Authenticator / Authy, then enter the 6-digit code:

Verify & Enable

Save these recovery codes somewhere safe (shown once):