all possible. for example we do login with (both iOS and Android apps):
- username + password
- 2F SMS that coming to phone (in most cases we take SMS from DB to avoid any need of SIM card on phone but few cases checking that SMS really coming to phone and takes SMS code from it)