Random IP Multiple Login Attempts

Some hackers are trying to login to my WP account.

In fact, I’ve had over 100 Brute Force attempts this past week alone. What should I do to prevent someone from accessing my account?

Could I enable a 2-Factor Authentication?

Could I ban a user after 3 failed login attempts?

Any help would be greatly appreciated. Thanks!