What happens if the password is
Password alone is not enough; with 2FA you can't log in without the code, so even if someone has the password the account stays secure.
Many users in Dhaka keep this layer even after changing phones; if there is no trusted device, suspicious logins are detected immediately.
