And yet many people are already doing that because of two-factor security codes many services use to make sure it's you.