Maybe that's the point. It's not a very secure method of verification, so it is sensible to want something better, like an ad hoc secret phrase.