Fix two-factor