Turn on two-factor sign-in for administrators Two-factor protects the accounts that can refund money and read every client record. It takes ten minutes; plan how a lost phone is recovered first.