i bought the physical authenticator token many years ago, no idea why anyone would not use one