Passphrase header - Coinbase API
I've experienced the same problem. I can assume that you're creating API keys at https://coinbase.com/. 

The passphrase is related to updates they made so far and you have to create API keys at https://pro.coinbase.com/