The second factor of multi-factor authentication – the “something you have” part – is great and all…as long as you have it.