You enable "2-step verification" under your Google account settings.

exactly where do you set that? am not seeing it in my email settings.

p.s. i see it now.. its under "more account settings" and is not setup/used until you do the setup. so for most folks it should be disabled/non-factor ...