@maneco64, you shouldn't have to enter your private key phrases to login. Its only at registration these are normally needed. Spam sites use very similar addresses and try to get you to enter key phrases. Once they do, they can then use these to take over your account and take your cryptos..
I wrote a steem article about it a few weeks back.
https://steemit.com/bitcoin/@diarmaidflynn/phishing-sites-trying-to-fool-you-re-bitcoin-cash-retreivel-from-coinbase-poloniex