From a report on this week's Congressional hearing on Social Security's information systems:
... During the hearing, [Acting Social Security Commissioner] Colvin announced the agency will, starting this summer, improve security with additional personal information protection: Social Security website users will need to enter a username, password and one-time texted passcode to a Social Security-registered cellphone to access their accounts. ...