Answers
A second check using a device you own
Adding a delay after wrong guesses
Making it longer to add combinations
Avoiding names and predictable sequences
Stops entry even if the password is guessed
Using at least 8 characters
Needs something you know and something you have
Mixing uppercase, lowercase, numbers and symbols
Setting a maximum number of tries
A code sent to your phone
Locking the account after several wrong guesses
A phone lock screen that blocks more tries