Two-factor

A code from an authenticator app as a second step. Keep the backup codes for when the phone is gone.