This 2nd element is strictly bond to something which the user has (just like a mobile), and that identifies him. The 2-variable authentication can Therefore be considered as a list of a thing that is understood https://im-token-io.com/9u2kdch/