“While password-only authentication is still the norm for many online services, more services are enabling optional two-factor authentication,” Maier says. “Mobile devices have two roles in this ...