Add Nexus to an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Aegis). After this, signing in needs your password and a 6-digit code from the app.

Two-step sign-in is on. Save these recovery codes somewhere safe (a password manager). Each one works once if you lose your phone. They are not shown again.