two factor authentication can be enabled multiple ways - through dedicated hardware like Yubikey or via software via things like Google Authenticator or proprie

two factor authentication can be enabled multiple ways - through dedicated hardware like Yubikey or via software via things like Google Authenticator or proprietary solutions like SecureAuth (around WAY before Google Auth). What 2 factor is used isn't important - what's important that you use some sort of 2nd factor (your password - something you know as being the first factor) that's limited to one physical device (something you have) that is not easily moveable. And NO, SMS is NOT 2 factor since you can bump a cell phone number from one phone to another pretty trivially with most cell phone companies (unfortunately). SMS is about on par with emailing you a code for secondary authentication. A barrier for a remote hacker who doesn't have physical access to you or your stuff, but not that high of a barrier.