The Security page allows you to enable two-factor authentication. By default, two-factor authentication is disabled. If you enable it, users will be prompted at every login to enter their password along with a unique verification code from an authenticator application.