Or using a hardware authenticator.