A good resource to learn more about where you can use two-step verification (also called two-factor or multi-factor authentication) is twofactorauth.org.  While you have to use two-step verification with your HarvardKey, deploying it with other services you use (at Harvard and elsewhere) is a great way to enhance your online security.