Science & TechHow it works
How a second factor makes stolen passwords worthless.
A password is something you know. A second factor is something you have, like your phone with an authenticator app, or something you are, like a fingerprint. Someone who found your password in a data breach can't get in without that second factor. App codes or hardware keys are safer than SMS.
Useful: Turn it on for your email account first: whoever controls that can reset every other password.
Source: en.wikipedia.org