Just one question. I have the free authenticator on my iPhone and I've set it to ask me for a code once in awhile. Should I have it set to ask me all the time or?
It'll ask again periodically from the same PC, or the first time you log in, from another PC or if you are trying to log in from a different IP. You can ask for it to ask everytime but unless you use a PC that other people use, its np.
If you're using gmail as your main email account, they offer the same type of service (two-factor authentication) except it works over SMS instead of an app.
No SMS code, no access to your email account (you can enter a backup phone number and there are static backup codes in case you lose your phone). This is also a MUST since if someone gets into your email they have the keys to every account under that email address.
If you're using an email provider without this feature, you might want to think about switching.