To enhance account safety and combat unauthorized access, Uber frequently prompts drivers and occasionally riders to use multi-factor authentication (MFA) through a third-party authenticator app. While Uber's internal system can send SMS codes, they strongly recommend apps like Google Authenticator, Microsoft Authenticator, or Authy for a more secure, "time-based one-time password" (TOTP) method. This request often surfaces during a "Security Checkup" in the app settings or when a new device login is detected. For drivers, this is part of the "Uber Real-Time ID Check," which may also involve a biometric photo. By utilizing an authenticator app, users provide a secondary layer of defense that is much harder for hackers to bypass than traditional text messages, which are vulnerable to SIM-swapping attacks. If you are being asked for this, simply download one of the verified apps from your phone's store, link it via the QR code provided in the Uber "Security" menu, and you will be much better protected against account takeover attempts.