These can be used to make sure it's really you signing in or to reach you if there's suspicious activity in your account