OTBOYOTBOY
1234

Which kind of two-factor code is hardest for a criminal to steal?