To ensure optimal security, two-step authentication is used. This requires a password as well as a unique six-digit code that is typically sent via SMS. The National Institute of Standards and Technology has voiced its concerns about this method and Google quickly responded by having users try an alternative method.