Customer login security

[em010]

I am looking to add an additional step to the customer login process. I would like to implement something along the lines of a 2auth ( they enter their email and password then get sent a code much like the staff login ) or they have to answer a question (custom field) that they had made upon registration. 

 Any information would be super appreciated!