A time-based passcode generated by an authenticator app is harder to hack than an SMS text message, but that doesn't mean an authenticator app can't be hacked — especially if it generates codes that allow you to log into your accounts. A safer option is a two-factor authentication method where an Allow or Deny request pops up on your device. To hack this type of authentication method, a cybercriminal would need to physically access your device.