Two-factor on the mailboxes

My professional mailbox holds sensitive client mail. I'd feel better with 2FA / app-password enforcement available on the webmail login. Right now it's just a password.