>>totony+zN5
You only need two of the three factors to make it multifactor. A computer with a fingerprint scanner could be enough if it’s implemented properly. It’s something you have (a specific computer with a specific fingerprint scanner) with something you are (the fingerprint). In practice, you also need to know an identifier like an email or username, but those are often considered public.