We don't have a two-factor authentication system or Multifactor authentication system to sign into Swan currently.
However, we do have a 2FA system for all withdrawals and all Bitcoin address changes. Anytime that you try to withdraw Bitcoin or change your withdrawal address, you receive an email confirmation to the email account you signed up with. You must click the email confirmation to initiate the withdrawal or change the address. This means that a hacker with access to your Swan Bitcoin password, but not your email password, would never be able to move your Bitcoin. Moving your Bitcoin would require access to two sets of passwords.