Open Account → Security and choose Set up two-factor authentication.
- Scan the QR code with an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Authy…).
- Enter the 6-digit code it shows to confirm.
- Save your recovery codes somewhere safe. Each one works once if you lose your phone.
From then on, signing in asks for a code from the app after your password.