Common security practices define authentication factors as: 1) Something only you know [password], 2) Something you have [hardware security token], and 3) somet

Common security practices define authentication factors as: 1) Something only you know [password], 2) Something you have [hardware security token], and 3) something you are [fingerprint, iris scan, etc]. And you should need at least two of these to authenticate to a system.