One of the most convenient ways to log into an app has cyber security professionals concerned, with some saying one-time passwords should go away completely.