This article is completely wrong in some regards 
Most important, it seems to confuse two-factor authentication with two-step authentication. Sending a code to a phone via sms is NOT a two-factor authentication.