If you have not activated Google Authenticator, you very well should.
Not only can the 2FA be used for Google services, it can also be used for third party websites.
You might have seen it being used in Wordpress or Evernote.
It is actually pretty simple. Try out a demo of how it works from dendory.net. The demo site uses ga4php. Better code using Python. Or use Node lib.
Read about the API on the URI key.
