I have facebook and gmail sms activated login. Whenever I log from an unrecognized device, an sms is sent to my phone with a code to insert. I suggest you do the same.