This is true of my personal bank. But the business bank we use need a security device, but they have dropped that and there is now an app for Android or iOS. That's that does what is basically one time codes.