Currently there's no way to enforce two-factor authentication, it would be an amazing addition to this product to support common 2FA providers using Microsoft and Google Authenticators for example. You'd scan the QR code and setup your token etc.