When you verify a phone number the SMS verification code should be set as the user password...
So if a user logs onto another device they will need to verify their number and this will change the password which means the old password will no longer be valid.