2-factor authentication ensures that an extra step must always be taken before logging in.
In case someone has (unlawfully) collected your password, they cannot access the account directly.

You can choose SMS verification or for Google Authenticator.