A second step at sign-in. When more than one is on, you choose which to use each time.
Three ways to get a code.
An authenticator app, a text message or an email. Turn on more than one and pick at sign-in. One-time backup codes get you back in if you lose your phone.