The account has the basic authentication which makes use of passwords. By entering the NIC / account ID and the password you will be able to authenticate yourself to the system. Whilst this provides a basic level of account security, you can enhance the security where by you have multifactor authentication. This is commonly known as 2FA (2 Factor authentication).
Your account actually supports up to 4 Factor authentication. This can be shown in the following way:
Authentication1) Password You would enter the password for each login attempt and logout on every attempt, this provides you with a basic level security. 2) IP address You can limit the access to your account by the IP address. If your location offers static IP address then you can rule out all other connections to your account as any other IP address connecting to your services will be from a 3rd party. Technically you have in essence locked out all other IPv4 addresses for the value of 4,294,967,296 possible IPv4. 3) Mobile App You can use a special mobile application which will enable a random number which is only valid for a short period of time. This number must be used within the time frame of approx 30 seconds, after 30 seconds a new number will be shown. 4) Text message You can also get text messages to be sent to your mobile number for authentication. The text message is sent for free at no cost to the end user. The text message will send a set of random numbers which you will submit to the account on every login to further authenticate your account.
In essence you can combine all these authentication methods to your account to further your account security as your account holds all your services and some of these services maybe critical to your infrastructure.