It's exactly how 2-factor authentication works for banking sites such as Bank of America and Chase.