SMS-Based One-Time Passwords: Risks and Safeguarding Tips While SMS-based One-Time Passwords (OTPs) are more secure than using a password alone, they are increasingly targeted by sophisticated cybercriminals. Agencies like the FBI and CISA now recommend moving away from SMS codes for sensitive accounts due to critical vulnerabilities in the underlying telecommunications infrastructure. Core Risks of SMS OTPs
Cyberattackers use several methods to intercept or bypass SMS codes without ever needing physical access to your device.