This next component is strictly bond to something that the user has (similar to a mobile), and that identifies him. The 2-variable authentication can Hence be considered as a list of something that is known (password) https://im-token-io.com/r66zq/