Two-step verification adds an extra layer of protection: besides your password, you confirm access with a 6-digit code sent to your email.
You can mark a device as trusted so you are not asked for the code for a while. Do not use this option on public or shared computers.