One scam app even captures your QR codes. You don’t have to look very hard for it: The developer took out an App Store ad, which means it is prominently shown when you search for authenticator ...

Unlike SMS codes, authenticator apps work without a data connection, and they generate codes on your phone, so the codes can’t be intercepted. These apps generate a code called a time-based one ...