Add a second step at sign-in using an authenticator app (Google Authenticator, Microsoft Authenticator, Authy, 1Password…). No SMS.

Set up two-factor

Scan this with your authenticator app, then enter the code it shows.

Can't scan? Enter the key manually

Code from the app

Turn off two-factor