I have had one-time passwords sent to my phone via SMS. Those one-time passwords include those for 2FA and the occasional password reset.
Should I delete those SMS messages after the one-time passwords have been used?
The used one-time passwords cannot be reused, but I am wondering if the history of used one-time passwords present a security vulnerability. Say if the authentication of the site use an insecure algorithm for the one-time password generation. Given enough history of the one-time passwords, someone who manages to retrieve the SMS stored on my phone could derive the next one-time password in the sequence.
Out of scope of this question: Assume the SMS messages are not intercepted.