We text a code to prove the number is yours. We also use it for appointment changes and account recovery.
Use 15 to 128 characters. A phrase you can remember beats a short password.