Two-factor authentication is the highest system-level defence mechanism for your account. Even if someone else obtains your password, they cannot easily log in.
How it works: When you log in on your phone or the web, in addition to your password, the system will require a 6-digit security verification code sent to your linked email address.
How to enable: Go to Settings - Nothing account in the top right corner - Two-step verification to enable.