1. A method of authenticating a user operating an access device comprising: causing the display, on the access device, of a plurality of photographs to the user, at least one of the photographs being from the user's photograph collection and already familiar to the user, remaining photographs being decoy photographs; accepting an input selection from the user identifying one of the displayed photographs; and allowing access when the user's selection identifies the displayed photograph from the user's photograph collection.