* Something only the user knows (e.g., password, PIN, pattern);
* Something only the user has (e.g., ATM card, smart card, mobile phone); and
* Something only the user is (e.g., biometric characteristic, such as a fingerprint).
Your example was two things that someone knows -- one factor.