Hi Evy

Totara 10 has an authentication method Self registration with approval - that requires an admin to approve the account- Recaptcha is also able to be enabled with self registration to help prevent robots from self registering.

There have been some attempts to develop two step authentication with Google authentication but nothing that have been fully developed. 

regards