Does Spanbox support two-factor authentication on my accounts?

Yes, fully. You complete two-factor on each app's own login screen inside Spanbox, Google's prompt, an authenticator code, WhatsApp's QR, exactly as you would in a browser. Spanbox never handles the codes; it just holds the resulting session locally. So 2FA on your accounts keeps protecting them normally, and it's a good idea to keep it on.