Abstract: A password is held as part of authentication credentials on a secure media such as a smart card of a secure file. A user presents a PIN number which is different from the card which causes GINA or scripting module to unlock the secure module and extract the password. The password is presented to the operating system or an application to authenticate the user. The password may change without the user being aware of the new password. The GINA or scripting module recognises a change password request or screen and generates a new random password which is passed to the operating system or application and, if authenticated, stored as part of the authentication credentials.