Two-factor authentication, the added security step that requires people enter a code sent to their phone or email, has traditionally worked to keep usernames and ...