Extra Security Layer

2FA requires something you know (password) and something you have (phone). This significantly reduces account compromise risk. Use authenticator apps over SMS when possible.

Backup codes let you recover accounts if you lose your second factor.