Multi-factor authentication systems indicate that more than one factor must be used to prove the identity of an online user. A typical second element is an SMS code that is sent to a registered handy number of the user (often referred to as a one-time password). This widely-spread method, however, has proved to be vulnerable, critically.