I forgot one…

A user name and password counts as two factor authentication. It requires a name AND a password

@jerry as long as you rotate your username regularly, sounds good to me