Enable 2F Authentication

Install and activate for everyone “WP Google Authenticator”  from https://wordpress.org/plugins/google-authenticator/ . Ask everyone to use google auth app.