Techniques for performing two-factor authentication in a process plant include receiving, at a user interface device, a first type of identification information for a user from an identification device or a physical trait of the user. The user interface device also receives a second type of identification information for the user from knowledge-based information provided by the user. The user interface device then determines that each type of identification information corresponds to the same authorized user within the process plant. When both types of identification information are for the same authorized user, the user is granted access to the user interface device. Accordingly, the user may execute functions on the user interface device to perform operations on a plant asset which is connected to the user interface device.