Security experts say a second layer of authentication, typically in the form of a numeric code sent as a text, is key to keeping sensitive data safe.