It's easier than you think for someone to steal your password. Any of these common actions could put you at risk of having your password stolen:
Using the same password on more than one place.
Downloading software from the Internet.
Clicking on links in email messages.
Secondary Authentication can help keep bad guys out, even if they have your password. It's a second layer of protection since you will need your password and a unique code that we will send you to your phone.