As the login to WHM is in fact done with a cPanel account that has been granted additional privileges, you need to set up two-factor authentication (2FA) for that account in the same way as you do for other cPanel accounts.
We describe how to do it in this guide.