Authentication should always require something you know. Adding something you have/possess like a crypto device is a great way to enhance security, but it shou

Authentication should always require something you know. Adding something you have/possess like a crypto device is a great way to enhance security, but it should always be a supplement to something you know - your password.