Experts warn two-step authentication using text messaging is not secure.