Two-step check

Code from Google Authenticator.