The U.S. National Institute for Standards and Technology (NIST) said SMS-based two factor authentication would soon be deprecated.