Two-factor authentication (2FA) is now enabled by default for all new and existing Looker (original) instances that use email and password authentication and that didn't opt out during the advance opt-out window. Administrators retain full control to manage or disable 2FA by using the Admin > Authentication > Two-Factor panel.
Text from the Google Cloud release notes, licensed under CC BY 4.0. Source: Google Cloud release notes.