Coinbase shows you a QR code, which is a representation of the secret key, which you then scan using an Authenticator app on your mobile device . Google Authenticator and several other authenticator apps allow you to generate TOTP codes using your mobile device or computer.