Yes, they do. https://www.bankofamerica.com/privacy/online-mobile-banking-...

Chase has a thing where it texts you a code as well.