im a noob, who made a noob mistake... very very silly mistake
im still trying to work out how to use the 2 fact auth
I've gone and changed all my passwords now
im looking at the Yubikey and software authenticators now
You'd want a fully offline device for any serious authentication.