Due to security concerns at some point a 2-step-verification was put in place on the network. This is not something that's Alchemix specific.
So what you do is first "approve" a contract to work with a select token on your behalf and then you gotta deposit said token.
It's kinda bad UX but it's better to have it like that vs any contract being able to manipulate your deposits at will without you consenting.