I use Authy. However read past problems it may or may not of had. It is compatible with the Google Authentication algorithm with is a time based password system. I picked it over Google Authenticator ...

My problem with taking the second option is that it's highly unlikely anyone will do the research needed to determine the true cause of a hack. CYA for the company rather than encouraging better ...