How Two-Factor Authentication Works
When you enable 2FA, logging in requires two factors: something you know (your password) and something you have (a code from your phone, a hardware key, or biometric data). An attacker who steals your password still cannot access your account without the second factor.