A two-factor authentication won’t be a good idea as any of the types such as SMS or Google, authenticator needs internet to work and will make the router inaccessible in offline mode. For restricted...