A good practice in 2 factor authentication is to use a authenticator app (like google authenticator) as the second factor. Anyway if they have access to your phone this want help you either. But the thing with sms as a second verification step is that it has several risks. NIST no longer advices to use sms-based 2 factor authentication (https://techcrunch.com/2016/07/25/nist-declares-the-age-of-sms-based-2-factor-authentication-over/)
John Opdenakker
- 91
- 4