Seconding 2FA to protect lead information, but also our sensitive third-party credentials (social accounts, etc).