Security keys are thought to be more effective at preventing phishing attacks and data breaches than two-factor authentication via SMS.