A bank asks for a password and then a code sent to a separate device. That approach is:

1. More than one credential is needed. 2. The credentials arrive by different devices. 3. It is multifactor login. _Source: OpenStax Introduction to Computer Science, Chapter 14, Cyber Resources Qualities and Cyber Computing Governance._