This 2nd component is strictly bond to something that the user has (like a mobile), and that identifies him. the two-factor authentication can Consequently be regarded as a set of a thing that is understood (password) https://im-token-io.com/otbfrjq/