Pro-Tip: Neither are secure. Using Email or SMS are equally bad and frankly its actually easier to send a fake SMS. That said, its contextual and SMS is usuall

Pro-Tip: Neither are secure. Using Email or SMS are equally bad and frankly its actually easier to send a fake SMS. That said, its contextual and SMS is usually faster, especially if you use gmail/etc. Without an actual OTP or TOTP token, its basically just window dressing. And to be completely real, I'd worry more about an exploit of the site's code than any sort of 2FA issue.