You can have a rescue email address only if you don't have two-factor authentication or two-step verification.
support.apple.com/en-us/HT201356#rescue