While some services online may not have another option for two-factor authentication, the agency urged users to use alternative methods when possible to minimize the risk of being hacked.