Abstract: Computer implemented multi-factor authentication method for authenticating a user of a secured component (21, 31), comprises the user requesting access to the secured component (21, 31) via a client device (2); client device (2) providing a first authentication factor (22) to the user who provides the first authentication factor (22) to a personal device (5) and associated to the user at an authentication component (51, 61); client device (2) and personal device (5) are physically distinct; the user providing a second authentication factor to personal device (5) and forwarding first authentication factor (22) and second identification factor to authentication component (51, 61); authentication component (51, 61) verifying identity of user and providing an access token (62) to secured component (21, 31) which provides the user access to secured component (21, 31) on client device (2) in accordance with the access token (62). Allows separating authentication from use of secured component.