Two-factor authentication (2FA) is intended to make the login process more secure for Internet users. Users must also enter a code after entering their email address and password as usual.
2FA also does not protect against phishing or social engineering attacks - i.e. attempts to deceive 2FA users in order to obtain personal data. There is also a widespread assumption that a second device is absolutely necessary for 2FA. But according to chip.de, it is entirely possible to use your own smartphone for both steps of authentication.