Your password, two-step sign-in and where you are signed in
At least 12 characters. Use a password manager.
A code from your phone as well as your password.
Sign out of anything you do not recognise.