With #2239973: Deploy two-factor-authentication on drupal.org, two factor authentication is available to admins on Drupal.org. Before we give everyone the opportunity to lock themselves out of their account, we need a plan for support, #2482851: Policy on resetting accounts after TFA is enabled. . Once that is working well, then all authenticated roles can use TFA.

See also #2480577: Improve UI for main Security tab.