Can I turn on 2FA for MyEtherWallet?

No. And if you landed on a site telling you that you could, they are lying to you and trying to steal your private keys.

2FA / MFA is something that works for server-side applications in order to add an additional layer of security on top of the username / password.

TOPT (Google Authenticator)

Time-based One-time Password (TOTP), popularized mainly by Google Authenticator, verifies your identity based on a shared secret. This secret must be shared online between you and the provider.

When logging into a website, your device generates a unique code, based on the shared secret and the current time. Then you have to manually submit this code. The server generates the exact same thing, based on the same secret, in order to compare and validate the login request.

source

All of this work is done so that you are authorized to access the information stored on the servers of the service you are using.

The Blockchain & MEW

In the case of MyEtherWallet.com, a client-side application, we do not have servers in this fashion. We do not hold your keys on our servers. We do not give you access to the keys on our servers. You have the key. That key is the core piece of information that allows access to authenticate a transaction on the blockchain. While you can encrypt it with a password, there is no server that can verify or track a 2FA login / OTP when you are using MyEtherWallet. If someone gets your private key (keystore file, mnemonic, passwords), they have complete access to your funds. There is no stopping transactions, canceling transactions, or resetting passwords.

In order to implement it, we would need to store your key and protect it on our servers. This is simply not something we want to do. If we did so, we would have a situation where anyone who gets access to our servers, your keys, or your 2FA codes, gets access to the funds of every user of our servers. The bounty on hacking our servers is as large as the funds held by every user. That's a huge bounty and is dangerous.

If this is functionality that you do want, feel free to use any exchange / hosted wallet like Coinbase, Kraken, Poloniex, Bittrex, Bitfinex, Gemini, and so forth. Just be aware of the risk of letting someone hold your keys, and in turn, 2FA codes, for you.

Or, you know, spend the <$100 and get a hardware wallet. It's worth it. You can use it for 2FA on other services and to ensure the safety and security of your funds.

More information: https://github.com/kvhnuke/etherwallet/issues/292