Google Authenticator is trending and it’s the worst option. It’s single device only. If your phone breaks, you have no way to get the codes back.

Authy is a better option, and 100% safe. The cloud only stores an encrypted version that only your device can read with a special pw.