A method of user authentication. The user enters an ID and password and, in return, is issued a challenge by the system. The system compares the user's response to the challenge to a computed response. If the responses match, the user is allowed access to the system. The system issues a different challenge each time. In effect, it requires a new password for each logon.