Abstract: A system and method for authenticating an on-line user by authenticating the computing device being used by the user. The method may comprise reading device information from a computing device, creating a device credential from the device information; and, communicating the device credential to an authenticating body for authentication. The method may additionally comprise receiving personal information from a user; creating a user credential from the personal information and, communicating the user credential along with the device credential to the authenticating body for authentication.