The problem with 2-factor authentication is that if I lose my phone or its battery is dead or I'm outside of the country, then I can't get my email. The only danger I see if I have a strong password is keyboard loggers if I use an untrusted computer to get my email.

One more technique: I never post a question until I've written the simplest possible program that demonstrates the problem. Most of the time, the act of doing this shows me the solution If not, then at least I've provided the StackOverflow community with something concrete and simple that they can work from. Plus it eliminates most of the "have you considered..." non-answers.