this article is completely wrong in some regards most important it seems to confuse two factor authentication with two step authentication sending a code to a phone via sms is not a two factor authentication