Sign-ins will also ask for a 6-digit code from an authenticator app on your phone, so a stolen password alone can’t get in. Takes about a minute.
You can turn it on any time in Settings.
Keep these somewhere safe, like your password manager. Each one signs you in once if you lose your phone. They won’t be shown again.