For the purpose of this tutorial, we'll assume that your Google Workspace administrator has turned on the enforcement of 2-Step Verification and you're setting it up for the first time.
Please note: if you've already setup your Google Workspace account on your phone or other devices, you'll likely be required to log back in once you enable 2-Step Verification.
In addition, if you have any programs that don't support 2-Step verification, you'll need to create a "single use" or "App Password." You can read instructions on how here: https://support.google.com/accounts/answer/185833?hl=en
Head to http://bionic.cat/google2step.. Sign in if necessary and then scroll down and click on "2-Step Verification" to get started.
Enter a phone number where you can receive a phone call or text and click Next.
Enter the code you receive in your phone call or text and click next.
Now turn on 2-Step Verification.
That's all there is to it!
If you have your Google Workspace account setup using Apple Mail on your phone, you'll eventually be prompted to log back. in. If you're lucky, it'll prompt you using this new two factor method. If you're not lucky, you'll need to remove the account entirely from you phone and add it back in order for it to force the new 2FA protocol.