How do I enable two-factor authentication?

Go to Account → Security and enable TOTP 2FA. Scan the QR code with an authenticator app (Google Authenticator, Authy, 1Password), enter the 6-digit code to confirm, and save your backup codes somewhere safe. From then on logging in also needs a code.