Every login these days seems to require a text of a code to your cellphone. Including those where you change an account password.
Verizon, and I assume other carriers now allow you to secure your number from being “ported” to another carrier by someone out to steal your identity.
Check your settings to make sure this feature is activated. It isn’t by default.
h/t Throwawaybaby09876