Think of it as being the username and password. That's how many institutions have treated it for a long time.