I recently lost my phone and quickly realized because of 2 step authentication I could not login to access the locate service or any other mobile features, (scream, wipe, etc...) I had set up my account to send the access code via SMS to the phone I had lost. I was lucky and a good Samaritan found my phone and returned it. I logged into my account to change my authentication settings and discovered I only had 3 options. Send code to VIP token, SMS to a phone number or a recorded phone call to a phone number. Here is the problem. I only have one other phone number. My home land line. I could set up the account to call my home phone with the access code so I could log in, but what about the scenario I just experienced? I was not home. When You lose a phone, in most cases you need to act quickly before it is gone forever. I wouldn't have time to drive home and then login to try and locate my phone. What if I was traveling? The better option is to have an email option to receive the access code for the two step authentication. That way I could login anywhere I have access to a computer. Apparently, that is not an option. The customer service representative I spoke to had no solution. In short, unless you carry a second cell or just misplace your phone at home, the location service does you no good in a majority of the lost phone scenarios you might find yourself in. How could Norton not have thought about this. Trying to call them for help when you have a lost phone would do no good. They do not have access to help you with your phone, plus there is no way to get the customer service phone number without logging into your account first and requesting the contact number.
The VIP service used for the 2 step authentication is actually a Symantec service, not Norton. You can try posting this suggestion in the Symantec forums here.
Another option you can use is to have the code sent to a friend's phone.