Via third party integration yes. Outside of that is user/password then they send a code to your email or phone you enter that and it bumps you to third party if you've requested it.

https://www.bankofamerica.com/security-center/online-mobile-banking-privacy/usb-security-key/