I thinks the idea is that it has two factors built in. The password/pin is something you know. You still have to use it on a specific device though, which is the something you have.