2FA — two-factor auth. Password + phone code. Blocks 99% of attacks (Microsoft study).
Types
SMS (weakest, SIM swap), Authenticator app (Google, Authy), Hardware key (YubiKey), Push (Microsoft, Google).
Choice
Personal — Authenticator app. Business — YubiKey.
Backup codes
Save at setup. Needed if phone breaks.