How do I turn on two-step sign-in?

Go to Account, then Password and sign-in, and turn on Ask for a code from an app. Scan the code with an authenticator app and enter the 6 digits it shows.

Keep the backup codes shown at the end. Each one signs in once if the phone is lost.