An apparatus for authorizing operations associated with blocked media assets using two-factor authentication, the apparatus comprising: means for receiving a first request to access a media asset for viewing on user equipment and a first input of a first authorization code, wherein access to the media asset is blocked; means for determining that the received first authorization code matches a stored first identifier granting access to view the media asset; means for, based on determining that the received first authorization code matches the stored first identifier, generating for display the media asset; means for, subsequent to granting access to the media asset, receiving a second request to execute an operation related to the media asset; means for, based on receiving the second request: querying a parental control database for information relating to permissible operations associated with the media asset; determining from the information that a second authorization code is required to execute the operation associated with the media asset, wherein the second authorization code is generated periodically as a function of time by a token mechanism remote from the user equipment; receiving a second input of the second authorization code for the operation related to the media asset; transmitting, to an authorization database, the second authorization code, wherein the second authorization code was generated at a first time; in response to transmitting, to the authorization database, the second authorization code, receiving an indication granting authorization to execute the operation associated with the media asset based on the transmitted second authorization code matching a second identifier generated at the first time; and means for, based on determining that the received second authorization code matches a stored second identifier, executing the operation related to the media asset. means for receiving a first request to access a media asset for viewing on user equipment and a first input of a first authorization code, wherein access to the media asset is blocked; means for determining that the received first authorization code matches a stored first identifier granting access to view the media asset; means for, based on determining that the received first authorization code matches the stored first identifier, generating for display the media asset; means for, subsequent to granting access to the media asset, receiving a second request to execute an operation related to the media asset; means for, based on receiving the second request: querying a parental control database for information relating to permissible operations associated with the media asset; determining from the information that a second authorization code is required to execute the operation associated with the media asset, wherein the second authorization code is generated periodically as a function of time by a token mechanism remote from the user equipment; receiving a second input of the second authorization code for the operation related to the media asset; transmitting, to an authorization database, the second authorization code, querying a parental control database for information relating to permissible operations associated with the media asset; determining from the information that a second authorization code is required to execute the operation associated with the media asset, wherein the second authorization code is generated periodically as a function of time by a token mechanism remote from the user equipment; receiving a second input of the second authorization code for the operation related to the media asset; transmitting, to an authorization database, the second authorization code, wherein the second authorization code was generated at a first time; in response to transmitting, to the authorization database, the second authorization code, receiving an indication granting authorization to execute the operation associated with the media asset based on the transmitted second authorization code matching a second identifier generated at the first time; and means for, based on determining that the received second authorization code matches a stored second identifier, executing the operation related to the media asset. in response to transmitting, to the authorization database, the second authorization code, receiving an indication granting authorization to execute the operation associated with the media asset based on the transmitted second authorization code matching a second identifier generated at the first time; and means for, based on determining that the received second authorization code matches a stored second identifier, executing the operation related to the media asset.