The proliferation of voice-activated IoT devices in smart environments has introduced significant security challenges, particularly around unauthorized access and command spoofing. In response, this paper proposes a unique multi-factor authentication framework that combines dynamically generated code words with smartphone-based verification to ensure secure voice command execution. Unlike conventional fixed-passphrase systems, our method generates unique session-based code words and requires real-time confirmation via a trusted mobile device, offering increased resistance against replay and impersonation attacks. The proposed framework is designed to integrate seamlessly with existing virtual assistants and IoT ecosystems, and its applicability extends beyond smart homes to include connected vehicles and industrial IoT systems, offering a scalable and secure authentication solution.