1. A system that enables obscuring a password entered upon an untrusted client, comprising: a data store that includes a set of user images; and a shared-secret proxy that communicates traffic between the client and a login server, the shared-secret proxy prompts a user to obscure legitimate password characters amongst random characters within a character string based upon a sequence of images that includes the user images and random images.