Open Settings, then the Security tab, and turn on the authenticator app. Scan the code with an app such as Google Authenticator, then type in the code it shows to confirm.
BYQ then gives you 10 recovery codes. Each works once if you lose access to your authenticator, so copy or download them and keep them somewhere safe. You can turn the authenticator off from the same tab at any time.