That's kind of the point of properly implemented 2 factor authentication, no?