1. An apparatus comprising: a processor and a memory including computer program code, the memory and the computer program code configured to, with the processor, cause an apparatus to: receive a user-defined pool of images; form only from the user-defined pool of images a set of user-pooled images for user authentication; divide the set of user-pooled images into two mutually exclusive subsets: a key user-pooled image subset comprising user-pooled images referred to as key user-pooled images and a decoy user-pooled image subset comprising images referred to as decoy user-pooled images; perform user-education regarding said key user-pooled image subset resulting from said division and regarding said decoy user-pooled image subset resulting from said division, wherein there is display regarding the key user-pooled image subset resulting from said division and regarding the decoy user-pooled image subset resulting from said division; produce an assortment of decoy user-pooled images and key user-pooled images; cause displaying the assortment of decoy user-pooled images and key user-pooled images; cause receiving user identification of user-pooled images held as key user-pooled images; and verify whether the identification of key user-pooled images matched with the key user-pooled images selected by the processor.