Set up app-based two-factor authentication with QR code, secret key backup, and live TOTP verification.