It's easier than you think for someone to steal your password. Any of these common actions could put you at risk of having your password stolen:
One of the more common ways of doing 2FA is with an authenticator app, like Google's or Authy's. These are free apps available across Android, iPhone and sometimes Blackberry.