Login site setngs mark ther and set your browsdr.cookies must be allowed). If someone steal your password and his browser is not in the list of allowed browsers, he will be asked to insert PIN code. So he can have your access details (login +password), but he can't login without valid PIN code!