[stock_toaster]

I was not prompted to update my password (and had long ago set up security questions), and was able to set up 2-factor immediately.

[deanclatworthy]

Your password must have already met their new "security requirements", mine did not.