Great timing! Google just launched two-factor authentication for every Google account. Absolutely something administrators should use for organizations; and something worth enabling for all users, as well.
Nice!
Andy
Simply fill in the provided online form, then click "Generate the URL", and Google's free tool does it automatically, in the correct format, for you. You don't have to be up on all of the technical background details behind doing this, just use this handy tool.