Currently, if someone obtains a Boardpro password that person has full access/download information that this password/access allows.
Using two independent mechanisms to verify the identity of a user improves security dramatically.
E.g a password and text of a security code, smart card or a password and fingerprint scan.
Text a Security Code (after users log in with a password, a code is texted to their cellphone. Copying that security code from the phone into the login process provides the second authentication method.)