The other version, which is far easier understandable in my opinion was this one:

Something you have forgotten, something you lost, something you aren´t anymore.

But there is even another variant, that should not be forgotten:

Something that someone else got to know, something that was stolen, something someone faked/cloned.

By the way, the concept is called "Multi-Factor-Authentication".