[mothered]

Definitely so.

As long as Two Factor Authentication (2FA) Is Implemented In It's correct form as follows:

2FA must contain two of the following three (authentication MUST derive from separate entities):

* Something you know (example, Password, PIN number, security question).
* Something you have (example, Cell phone, Smart card).
* Something you are (example, Biometrics- fingerprint, retinal scan).

Obviously the first two will apply here. Good suggestion Indeed.