More authentication is needed in addition to passwords such as SMS, biometrics, etc on extension.