Heads up: two-factor authentication becomes compulsory for all accounts on 14 January 2027. New accounts must set it up when they first log in. You can set it up now from your account page.