2-factor authentication ensures that an extra step must always be taken before logging in.
In case someone has (illegally) garnered your password, they cannot therefore access the account directly.

You can choose code via email or Google Authenticator.