Two-factor authentication with key block file stored separately.

BestCrypt allows moving container's key block to a separate file and storing it in a safe place (say, on a removable device, in your home safe).
Then, you can wipe the original location of the key block:

With such "headless" containers, you have two security advantages:
- brute-force or dictionary attacks do not work for such  containers;
- to open such container two factors must be provided: the valid password and the KBB file stored separately.