diff --git a/src/main/resources/static/js/popup/two-factor-auth.js b/src/main/resources/static/js/popup/two-factor-auth.js
index 18f47a0..adec644 100644
--- a/src/main/resources/static/js/popup/two-factor-auth.js
+++ b/src/main/resources/static/js/popup/two-factor-auth.js
@@ -91,7 +91,10 @@
       var seg = document.getElementById('tfaSegment');
       seg.innerHTML = '';
       self._maskedByType = {};
-      var channels = info.channels || [];
+      // SMS를 먼저 표시하고 첫 번째 수단을 기본 선택한다.
+      var channels = (info.channels || []).slice().sort(function (a, b) {
+        return (a.type === 'SMS' ? 0 : 1) - (b.type === 'SMS' ? 0 : 1);
+      });
       channels.forEach(function (ch, idx) {
         self._maskedByType[ch.type] = ch.masked;
         var btn = document.createElement('button');