The most common way an account's security can be compromised is a hacked password.

2FA (Two-factor authentication) acts as an additional safety measure by asking for a temporary 6 digit code on a device that only you have access to, such as your phone. The code cycles typically every 30 seconds.