On our paid plans we support Two-Factor Authentication (TFA/2FA) with Time-based One-Time Passwords (TOTP), which require an authenticator app such as Google Authenticator or Authy, or a password manager that supports them.
TFA applies when you log in with a password. When you log in with Google or Microsoft, the protection of that account applies instead.
Turn on TFA under Settings → Login Security.