Just a warning if you haven't enabled two-factor verification and don't want it (as I don't - it's a royal pain, IMHO) - do NOT enable it. Once you do, if you're running either iOS 12 or Mojave, you're stuck. You cannot turn it off. My sister did it (not realizing you couldn't turn it off) and we just got through setting up her new iMac and doing various things to iPhones and iPads attached to her Apple ID, and by the end of it, we were both ready to throw all hardware out the window. Every time we turned around we were being asked to enter another *&^% verification code. Now, there is a somewhat ominous bit in the Apple article about features that require it, but I haven't encountered any with iOS 12 installed - haven't updated to Mojave. I find this most intrusive on Apple's part - I suspect that the only way you could back out of it now is to abandon your existing Apple ID and using a new one*, which for anyone with any sort of purchase history with Apple, isn't going to be a good option.
https://support.apple.com/en-us/HT204915I really, really, hate that companies seem to think they can take all security decisions out of our hands in the name of "protecting" us. /end of rant.
*But only if you create it with iOS 10.3 or earlier, or OS 10.12.3 or earlier - if you do it in anything more recent, you're stuck with 2FA whether you like it or not.