This option is maintained by administrators under Settings → Two-factor authentication.
If two-factor authentication is activated, all users must use it.
Scan the code with an authentication app and follow the instructions to enable the functionality.