header bg

Question:

What is NOT an example of "something a user has" in the context of multi-factor authentication?

A Password
Explaination

"Something a user knows," is known as a password but it is not something the user owns.