Step 3: Set up two-factor authentication (2FA)