You can also use a generated security key to verify as a type of second-factor.