This further underscores that SMS is the worst option for 2FA.
June 18,2025
From Emily Long
One-time SMS codes are widely used as the second checkpoint in two-factor authentication (2FA) to sign into everything from banking apps to email accounts. As I’ve written before, though, SMS is one of the least secure 2FA methods, as it can be phished relatively easily.
Read full article: https://lifehacker.com/tech/one-million-two-factor-authentication-codes-exposed