Discussion on:

Authenticating users: Going beyond the password

"Security by Obscurity" is not the complete answer, but it could be included with other things or other methods (and perhaps just for certain situations). ie: The log-in is not easily found and perhaps you need to mouse over something to reveal the link.
For example if you really need it secure, JavaScript must be turned on - else you are sent somewhere else.
and you must come from a certain page - else you are sent back.

Two-factor authentication has become necessary to conduct online business of any kind. It will not only protect web-based businesses from online fraud, but also go a long way in establishing trust with their customers. The safer their online environment, the more customers theyll be able to attract. Like the author explained, two-factor identity authentication requires the presentation of two of the three authentication factors, thereby making it a much more secure process than the typical username-password authentication method.

http://www.telesign.com