USA-based person here who can log in to my Twitter and Facebook accounts without an SMS codes sent to my phone number, which I have not even supplied to them. Are you sure the codes are required?