When should I activate Two-Factor Authentication (2FA)?

You cannot yet: on buyer accounts, two-step verification is shown in Settings as inactive and cannot be switched on. In the meantime, use a password you do not reuse anywhere else and change it from Settings > Security if you think someone knows it.