There should be an option to only use totp application, sms verification is not secure, instead what you can do is allow for backup codes, much more secure.