On Facebook, for example, two-factor authentication is triggered when users try to log in in an unexpected way, such as from a computer in a different country.

BBC: Technology