Two-Step Login blocks criminals from using stolen Cornell passwords by requiring something they don't have. Something in your possession. When it's time to .