1. A method for identifying trusted websites, the method comprising: receiving a request from a client device to access a website using a user account that enables to access the website; retrieving a private image and a public image wherein the public image and the private image are associated with the user account; embedding the private image in the public image to create a combined image; transmitting the combined image to the client device for processing; receiving a confirmation from the client device that at least the private image is embedded in and extracted from the combined image; and in response to receiving the confirmation, allowing access to the website based on validating the credentials of the user account.