We recommend that both of your two variables are dynamic (not constant). For Genius users we provide an option to add a third variable in your passcode for extra security.