Use an authenticator app so a password alone isn't enough to get in.

Refers to accounts that have already been verified as active.

Usually contains thousands of email/password combinations.