I just implemented 2 factor authentication for google, and so far I'm quite happy with it. It's really nice knowing what applications can access your account.