There is no possibility to use the same username and password to steal coins from you. Think other way.
unless you use some site like blockchain or blocktrail and happen to use the same username and password and ignore everything that says to enable 2fa.