iTunes 12.3 brings support for two-factor authentication

If you turn on 2SV (and you should!), you’ll be asked for a PIN and password when editing your account or logging in for the first time.