I'd expect it's like Google Docs were you, after submitting your username and password, get a text message on your phone with a code to enter on the log-on screen? That would seem a bit excessive to me...