This is a must when using Cloud Services, yes, even Facebook. MFA will protect your account adding an extra layer based on:
- something you know – Your date of birth
- something you possess – An MFA application or a Token Device
- an RSA Token
- The Microsoft MFA app
- something you are – Your Fingerprint
Not neccesarily all those things at the same time but at least one, ex: Where available I always use MFA, 365 and Facebook among others.
Also, do not use the same password between sites. N e v e r.