Once logged in, go to account security. There is no facility to add 2 factor auth. (as of Feb 2023)

Compromising someone's registrar account and hijacking their domain(s) can have serious commercial consequences. I'd love to hear 123-reg's excuse for still not implementing 2FA.