Most people should enable 2-factor-authentication (Google Authenticator), but GMail has an even stricter setting for those most at risk of hacking attempts. https://landing.google.com/advancedprotection/