1. A remote user authentication device, comprising: a. a hand-held remote user authentication card-device with an interface and an embedded computer logic to interface the card-device to a network for a “what you have” factor of authentication including, at least, a card serial number; b. the card-device has a top side and a bottom side and has a thumbprint sensor positioned only on the top side of the card-device for when the card-device is held in a hand with only a thumb gripping the top side and the hand's index finger gripping the bottom side, the position of the thumbprint sensor on the card-device enables only the thumb to be naturally placed flat on the thumbprint sensor for capture of only a thumbprint of a card-device holder for a “what you are” factor of authentication; c. the embedded computer logic in the card-device with the interface transfers out an authentication record which contains separate “what you have” and the “what you are” factors of authentication, the card-device does not permanently store thumbprint identity data after the transfer to the network, and the card-device automatically functions as a two-factor remote user authentication device to the network.