What it does
Passwords alone are often not enough for administrator, editor, and client accounts.
A second check makes stolen credentials less useful and helps protect the parts of the site that matter most.
Setup
Turn it on for the roles that need stronger protection, then make sure account owners know how to complete the second login step.