That's weird they ask for that. You can setup a 2FA so that they would need access to your phone as well. Also, make sure that the email is legit. It could be

That's weird they ask for that. You can setup a 2FA so that they would need access to your phone as well. Also, make sure that the email is legit. It could be an attempt to gain access to your account.