MetaMask get more popular. When you enter your 2FA info into the form, it generates a random code that you need to use. You can then enter that in place of your password. It will generate a unique pin for you and you can use that to unlock your account. (You can't take it out again.) This is an important step. If you lose your password, you lose everything in your Coinbase account. This is a strong way to keep you from doing that. The best part is that it's a browser add-on, so you can set this up on any device. Secure sharing. Don't share your phone number or email address with others. If they try to get into your account, Coinbase will get them blocked immediately. For your account, they'll use the unique code you created in the email they sent. Store the pin, not the password. Your 2FA code is only needed for your account. If you lose your phone, you can still log in with the code and the email. If you lose your password, all you have left is the code. Settings can be complicated. Many sites don't have good account security controls. Many (most) of the more popular crypto sites don't. I keep Coinbase on my startup console because it lets me get my money out of my account whenever I want.