two-factor SMS auth is becoming common, for better or worse. GMail and Craigslist both use it now.