I think it's best to keep combining it with passwords. It should be always a combo of something you know and something you own. And that "something" can also be the device itself, like desktop, laptop and smartphone.