Two-Factor (or Two-Step) authentication is an extra layer of security designed to verify a user’s claimed identity, while further protecting the user’s personal information. In addition to requiring an email and password, we send a code to the user’s phone (via SMS or call) that must be verified to both create an account and log into an account.