I am always counseling readers to use two factor authentication to protect themselves from hackers hijacking their website profiles. I see a lot of hacked Facebook accounts because the user didn’t set up two factor authentication. However, scammers are clever devils; and, they have figured out a way to social engineer the two factor system. They send a text to your phone, and act like a website seeking to authenticate you as a user. Then, they ask you to input a code that allows them to gain access to your system. Don’t do it. Authentication is designed to generate a code to be entered into the main device, not the phone. Learn about two factor authentication. Use it. But, be careful about using it. The big red flag here is that any text message that asks you to enter a code on the phone itself should be viewed with suspicion. The phone should only be used as a tool that only you could possess; and, which gives you a code to enter into your computer or other device to gain access on that device. Never enter a password or code unless you are certain that you are at a legitimate website. Be careful out there. There be dragons. 
