Staff at a financial consultancy firm currently use an alphanumeric password to log into their secure client database.
Describe one other authentication-focused security measure that could be used to verify that a staff member is indeed the person they claim to be.