Multi-factor Authentication

• One-Time Passwords are generally based on “something you have” (one-time pad, dongle, key, calculator etc.)

• Can be combined with reusable passwords (“something you know”) to create two-factor authentication

• If someone steals your OTP generator, not so useful if they don't also have your reusable password

• Banks use SMS messages etc. for 2 factor auth.