Currently it's password-only. Adding the option for an authenticator would be a huge security improvement.