My advice has long been to remove phone numbers from your online accounts wherever you can, and avoid selecting SMS or phone calls for second factor or one-time codes.

SMS spam is proliferating fast, but your phone's settings or a handy app can help stem the tide.

SMS codes, which are the codes you receive via text messages when setting up 2FA using a phone number, are not well-protected.