Why do phones need two-factor authentication?

Answer: Add an extra security layer

Add an extra security layer ✓ — Correct! Two-factor authentication asks for two different kinds of proof: something you know, like a password, plus something you have, like a code on your phone or a security key, or something you are, like your fingerprint. Even if a thief steals your password, they still can't get into the account without that second proof. Common methods include texted codes, authenticator apps, hardware keys, and biometrics, and together they help block phishing, data breaches, and password reuse.

Track the user's location — Wrong. Two-factor authentication checks who you are through multiple kinds of proof, not where you are. It keeps your account safe even when your password has been stolen.

Let people use shorter passwords — Wrong. Two-factor authentication doesn't replace a strong password; it adds another step on top of it. You still need a good password plus a second factor.