[stephenr]

2 factor auth is "something I know" (password) and "something I have" (token/device to provide a one time password)

Two passwords you know is not 2 factor auth