Hacking gmail password

I just had a gmail account hacked, did a google search and it seems there are many ways to hack gmail, e.g. after you fill out some ads forms and such. This looks scary and is it time for us to do two-step login these days?