Something you have plus 2 things you know does not turn 2FA into 3FA.  It&#x27;s still 2FA - it&#x27;s just somethings you know instead of something you know.<p>3 FA is :<p>* Something you have (normally one OR MORE user IDs)<p>* Something you know (normally the associated password or passwords for the user ID(s))<p>* Something you are (normally biometric)<p>[edit: technically, it&#x27;s multi-factor when using multiple user&#x2F;passwords - here&#x27;s a useful link <a href="https:&#x2F;&#x2F;pciguru.wordpress.com&#x2F;2010&#x2F;05&#x2F;01&#x2F;one-two-and-three-factor-authentication&#x2F;" rel="nofollow">https:&#x2F;&#x2F;pciguru.wordpress.com&#x2F;2010&#x2F;05&#x2F;01&#x2F;one-two-and-three-f...</a>]