Comment Re:It's both (Score 1) 271
You call them up, and say "oh hai, my password device is broken". They ask you to provide a few bits of information to make sure you're really you, and then they either send you a new one, or they disable the required use of it.