Wasn't this a World of Warcraft security thing?

For authenticators, is there a limit of one per account? If you lost it would you be screwed forever or could you have it enabled on both a keychain and your cell phone? Is it run through a third party website or would Nexon be in charge of them still?