Yes, 2-step verification is a hackable process but it's not a simple. Hackers need your username and password in addition to the ability to access your phone. They will then have to enter the 6-digit code that you send to your phone to sign in.