Each login requires a new, unique, time restrained OTP (one time password) your phone generates. Even if someone knows your password they won’t be able to login. If someone tricks you into clicking “remember password” on an unsafe computer – it won’t matter! If someone steals an old OTP – even that won’t matter because they’re valid for only 2 minutes!