We are working on our systems to add two factor authentication to web site logins.
At present this has been added to the accounts system only. You will see an option to set up 2FA when you log in. Simply follow the instructions.
In due course we plan to also add this to our control pages.
See http://aa.net.uk/kb-broadband-2fa.html for more information.