Turn on two-factor authentication from your account security settings. Scan the QR code, and sign-in asks for a six digit code from then on.
It also generates one-time backup codes. Keep them somewhere safe so you can still get in if you lose your authenticator app.