Require a code from your authenticator app at sign-in.
Add this secret to your authenticator app (or open the setup link on this device), then enter the code it shows.
Recovery codes — store these somewhere safe; each works once if you lose your authenticator:
2FA is enabled. Disabling requires your password and a live code.
Sign in with Face ID, Touch ID, or a security key — no password needed.