Profile menu > Security > Set up two-step sign-in. Scan the QR code with an authenticator app (Google Authenticator, Authy or 1Password), enter the 6-digit code to confirm, and turn it on. From then on sign-in asks for the code after your password. It is recommended for anyone who can send invitations; the notification bell reminds owners until it is on.