Two-step verification is needed because most of us have bad passwords and don’t always take precautions to protect our online security. We have weak passwords, and when a website is breached, our information winds up on the dark web for sale to cyber criminals. Thus, the industry has added this second layer of protection for our benefit.