You can control your password and account-access setting to protect your account.
Two-factor authentication is a method for protection your web account. When it is activated you need to enter not only your password, but also a special code. You can receive this code by in mobile app. Even if a third person will find your password, they can't access it without that code.