I just set up 2-factor auth 1) You still need to enter your password every time you log in. 2) You can add backup phones that can be called/texted with the ve

I just set up 2-factor auth 1) You still need to enter your password every time you log in. 2) You can add backup phones that can be called/texted with the verification codes 3) You can print out back-up codes that will always work (once) 4) If your phone is stolen and is using an application-specific password, you can revoke that password for that application.