Actually, they do have two-factor auth and apparently have had it for over a year now (I had no idea as well) Hit https://edit.yahoo.com/commchannel/sec_chal_ma

Actually, they do have two-factor auth and apparently have had it for over a year now (I had no idea as well) Hit https://edit.yahoo.com/commchannel/sec_chal_manage https://edit.yahoo.com/commchannel/sec_chal_manage to set it up. They've also finally added https support to Yahoo Mail. It's turned off by default, but still encouraging signs considering how long we've been waiting for it.