Requiring an additional proof of user identity (called a 'factor') during an authentication process is a great way to secure user accounts.