Let me kick off this article with the executive summary: if you have a Google account and a phone, enable 2-step verification on your account right away.
Google recently rolled out much improved security for its user accounts in the way of 2-step verification. What this means is that your account would no longer be protected by only a password, but also something which you should physically have, in this case your phone (mobile or landline).

Once 2-step verification is enabled, the first time you log back into your Google account after entering your password, you’ll be sent a one-time unique code to your phone (either a text or audio message), that you also need to enter in order to access your account.
If you have other devices that can’t use the verification codes, different unique application-specific passwords will be generated for those.
Total set up time is under 15 minutes and worth every second. And don’t delay because it sounds difficult – it really isn’t. Even the help page is quite short. Just head to your Accounts Settings page and click the Using 2-step Verification link under Security.
Pingback: Tweets that mention Google’s Advanced Account Security: 2-Step Verification -- Topsy.com