Two-factor authentication raises the barrier to account access by requiring a secondary proof of identity, but it still has a number of weaknesses that can be exploited by cybercriminals.