Two-factor authentication is a must, but don’t settle for the SMS version. Use a more secure authenticator app instead.