Hello @robertfruth,
We have yet to ever have any of our managed customers comprimised when using InControl2, using 2nd Factor authication is not an option, it is a MUST HAVE with all our customers, they are not given the choice.
Work though this guide to get yourself started in InControl2
