This is the single most important step you can take. Even if a hacker steals your password, they cannot access your account without the second factor.