Try the MFA module! It is available in the marketplace.
In addition to Axel. Indeed! An important reason is security, because by default after correct login the user gets his role and permissions just before checking the 2FA. That’s why it’s needed to use a safe solution like the the 2FA module Axel mentioned.