It’s something you have instead of something that can be guessed. The window gets a bit smaller if someone has to actually be in possession of a file instead of just being able to guess or bruteforce a password.