it's not a bank account

OK, I get security, and I can live with having to access a code on my phone to get into a site, but they're usually four or five digits, not this ...