Why text-message codes are the weakest second factor, and what to use instead
A code sent by SMS is better than a password alone, but it can be phished, intercepted or redirected to someone else's SIM. Standards bodies now say to move away from it. Here's the order of preference.