You should stop using SMS one-time codes. These are the weaker, traditional forms of MFA that Google and Microsoft dismiss in ...